Welcome to the R O C H E L L E website.
At R O C H E L L E we are committed to protecting and respecting your privacy. This notice sets out key information regarding R O C H E L L E and how any personal data you provide to us will be processed.
Categories of data processed, purpose and legal basis for processing:
Below is a summary of the categories of data that we process, the purposes of processing the data and on what legal basis we are processing your data.
1.2.1 Data collected when you shop in our webshop or use our online services
Contact details: If you make a purchase online we will collect your name, address, e-mail address, telephone number, country of residence and social media account contact details. Not all information is mandatory for making a purchase. We have marked mandatory information on our website in the check-out process. We will use your contact information to (i) process your purchase/orders and any returns, exchanges and complaints you may have relating to your purchase; and to (ii) communicate with you regarding your purchase and to answer and administer any questions or comments you may have regarding our products or services. The legal basis is that it is necessary to process your data in order for us to be able to meet our contractual obligations to you under the purchase agreement. We will retain your data for as long as necessary for this purpose. We may also process your contact details to keep you informed, via email, SMS, letters, telephone and other social media, of our special events, general news or promotions. The legal basis is our legitimate interest of being able to market our products to our existing customers. We may use your contact details for direct marketing purposes for up to 12 months after your latest purchase subject to your ongoing right to opt-out. You are entitled to reject our marketing messages at any time by clicking on the unsubscribe link included in each message or by contacting customer service at firstname.lastname@example.org
Credit card details: If you make a purchase online and chose to pay by credit card, you will provide your credit card information on our website to finalise your purchase. Your credit card details will be protected using Global Sign Encryption. The legal basis is that the processing is necessary in order for us to be able to fulfill our contractual obligations to you under the purchase agreement. We will retain your data for as long as necessary for this purpose.
1.2.2 Data collected when shopping online
Contact details: When you purchase a product online, R O C H E L L E will process your contact details for the following purposes; (i) to process purchases/orders and returns, exchanges and complaints; (ii) to communicate with you regarding the purchases and to answer and administer any questions or comments that you may have regarding any R O C H E L L E products or services. The legal basis is that the processing is necessary in order for us to be able to meet our contractual obligations to you under the purchase agreement.
Previous purchases and returns: R O C H E L L E will also process data regarding your contact details and previous purchases and returns online (product, size, price and date of purchase) during 36 months after the purchase. The information will be processed for the following purposes:
- Administering returns and complaints. The processing is based on our legitimate interest to provide our members with speedy and efficient service after the purchase.
- Allowing you to keep track of your purchases and returns by logging into your account. The legal basis is that the processing is necessary in order for us to be able to fulfill our contractual obligations to you under the Membership Policy.
Credit card or payment details : If you make a purchase online and chose to pay by credit card, you will provide your credit card information on the website for the purpose of making payment for the purchase. The legal basis is that the processing is necessary in order for us to be able to fulfill our contractual obligations to you under the purchase agreement. As a member you may also choose to save your credit card details for future purchases, for the purpose of speeding up the checkout the next time you shop. The legal basis for this processing is your consent. We will retain your data for as long as necessary for this purpose.
1.3 Newsletter Subscription
If you have subscribed to our newsletters, we will use your contact details to send out such newsletter. The legal basis for this processing is your consent. The newsletters will be sent to you until you unsubscribe to the newsletter service.
1.4 Customer service
If you have contacted R O C H E L L E regarding a complaint, return or question, the e-mail or chat conversation will be stored for as long as it is necessary to administer your matter, including following up on the matter within 12 months. Depending on the nature of the matter for which you are contacting us, the legal basis may be that our processing is necessary for us to be able to meet our obligations under the purchase agreement, or that we have a legitimate interest of being able to communicate with individuals who contact our customer service.
1.5 Anonymized data
It can be noted that we may also use anonymized data for our internal marketing and demographic studies to analyze, profile and monitor customer patterns in order for us to be able to improve our products and services.
1.6 Consent and withdrawal
If you would like more information about how we collect, use and store your personal data, you may contact us at any time by emailing email@example.com.
2. Does R O C H E L L E share your information with others?
R O C H E L L E does not sell or rent our customer’s personal data to any other entity.
We may share your data with affiliated companies including other companies within the R O C H E L L E group, joint ventures, franchisees and licensees.
R O C H E L L E may also share your data with selected suppliers who perform functions on our behalf such as fulfilling orders and delivery of orders, processing payments, carrying out promotional services or data management, to maintain our website, to distribute e-mails, to send out our newsletter, to provide client communications and to manage our customer database. As necessary, the personal data you provide to us may be processed by these third parties, solely on R O C H E L L E behalf and in accordance with R O C H E L L E instructions as data processors. We do not authorise any of our suppliers to make any other use of your personal data. If R O C H E L L E and/or its subsidiaries are subject to an actual or potential merger or acquisition or similar transaction, we may share your data with potential and actual buyer(s) and their financial and legal advisers, subject to such third parties undertaking appropriate confidentiality.
3. Transfer outside of the EU/EES
We may share your data with our selected suppliers, who may process your data in countries both inside and outside of the EU/EES when performing functions on our behalf as set out in section 3 above.
Please note that countries outside of the EU/EEA may not provide an adequate level of protection for your personal data. R O C H E L L E has however taken appropriate safeguards to ensure that the receiving parties of your data in countries outside of the EU/EEA shall provide an adequate protection of your data. Such safeguards may be that the receiving party has joined the Privacy Shield (if the receiving party is a company established in the United States) or that the receiving party has signed so called standard data protection clauses adopted by the EU Commission.
4. Your data subject rights
In this section we have summarized your data subject rights to request access, portability, rectification, erasure of your personal data, to restrict the processing of your personal data, to object to processing, and your right to lodge a complaint with the supervisory authority.
If you want to exercise your rights, please send us an email at firstname.lastname@example.org. Please note however that if you want to lodge a complaint with the supervisory authority, you need to contact the authority directly.
Notwithstanding anything to the contrary herein, R O C H E L L E reserves the right to keep and process your personal data in accordance with this policy to the extent necessary to perform our contractual obligations to you, and to the extent we are required to process your data by law or in order to defend ourselves in a dispute, to prevent fraud or abuse, or to enforce our Terms and Conditions.
Right of access
You have the right to obtain confirmation of whether personal data concerning yourself are being processed and, where that is the case, access to the personal data and information regarding, inter alia, the purpose of processing, the categories of personal data concerned, the categories of recipients to whom your data have been or will be disclosed, and the envisaged period of time for which personal data will be stored (or the criteria for determining this).
Right of rectification
You have the right to request rectification of inaccurate personal data concerning yourself, and to complete incomplete data.
Right of erasure
Under certain circumstances you are entitled to request that we erase your personal data or restrict our processing of your data, namely in the following events.
When it is no longer necessary for us to process your data taking into consideration the purposes for which it was collected.
When our processing is based on your consent and you have withdrawn your consent, and there is no other legal basis for the processing of your data.
When our processing of your data is based on a legitimate interest legal basis and you object to such processing, and there is no overriding legitimate ground for our processing.
When you have objected to our processing of your data for direct marketing purposes.
When your personal data has been unlawfully processed.
When the personal data must be erased for compliance with a legal obligation that applies to us.
When the personal data collected concerns a child (under 13 years of age) in relation to the offer of information society services.
Right to objection - direct marketing and profiling
You have the right to object at any time to our processing of your personal data for direct marketing purposes, which includes profiling to the extent that it is related to such direct marketing. If you object to our processing of your personal data for direct marketing purposes, including profiling, we will cease such processing of your data.
If our processing is based on your consent or if the processing is necessary for our performance of a contract with you, you have the right to request that the data which you have provided to us shall be provided to you in a structured, commonly used and machine-readable format and you also have the right to transmit such data to another controller.
Right to lodge a complaint with supervisory authority
Please note that if you consider the processing of your data to be in violation of applicable data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or the place of the alleged infringement.
5. How do I unsubscribe from R O C H E L L E newsletters and emails?
If you do no longer wish to receive our newsletters or other emails, you can unsubscribe as indicated in the particular communication, i.e. by using the unsubscribe link which is included on all newsletters and other emails. You may also contact us at email@example.com
6. How long do we keep your data?
We will retain your personal information for as long as necessary in relation to the purposes for which the data was collected or otherwise processed. Under section 2 above, we have specified the retention time, or the criteria for determining the retention time, for our processing of data in relation to the different purposes the data is being processed. In addition to the retention time stated under section 2 above, please also note the following.
We will retain your personal information as necessary to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements. Statutory obligations to retain data further remain unaffected.
7. Is it mandatory to provide personal data?
When you purchase our products online, or sign up for a membership with R O C H E L L E , we will inform you which data is mandatory. The provision of mandatory data is necessary for R O C H E L L E to be able to meet our contractual obligation to you, for example processing your order, or fulfilling the membership services requested by you.
8. Children's privacy and legal purchase age
R O C H E L L E does not wish to collect personal information from anyone under the age of eighteen (18). If you are under eighteen (18), we require that you inform and get your parents’ or guardians’ consent before purchasing anything or provide any personal data to us at http://www.cestrochelle.com/ or any other website related to R O C H E L L E .
Last date for modification: June, 2018.
Keeping you and your personal information secure is very important to us. We take a number of reasonable steps to try to protect the personal information that you provide, including:
- Using a Secure Socket Layer (“SSL”) to encrypt the personal data that you send us during the order process (including any financial information such as credit or debit card details);
- Not keeping details of your credit or debit card that would enable any third party to transact using that credit or debit card (such as your CCV number); and regularly monitoring our servers and IT systems for possible vulnerabilities and attacks. Unfortunately, despite this, the transmission of information via the Internet is not completely secure. We cannot guarantee the security of your personal data transmitted to or through our Website, and any such transmission is at your own risk. In particular, please keep in mind that if you voluntarily disclose personal information through other means of communication than the Website in a non-protected environment (such as through email, sms, online messages) then that information can be collected and used by others outside of our or your control.