Privacy Policy

Date of last update: April 2, 2024

The purpose of this privacy and personal data protection policy is to exMonochrome how we (Si Si La Paillette SAS – RCS Paris 882 940 408) collect, use and share the personal data of customers, prospects and users who interact with us, in particular through our merchant website hosted at the address https://sisilapaillette.fr (the “Site”).

We determine why and how personal data is processed in our role as “data controller”.

Article 1 – Collection of information

The collection of data is limited to the information necessary to achieve the purposes described below. Mandatory data is indicated as such in the collection forms. We personally collect personally identifiable information such as names, zip codes, addresses, emails, phone numbers, etc. which are voluntarily provided by visitors like you. When using the Site, we automatically collect certain information, including personal information, about the materials used and how they are used, such as technical data (such as the IP address of the mobile devices used, system of operation, browser, etc.) and information relating to the consultation and use of the Site.

Article 2 – Cookies / Tracking / Technology / Log Files

The Site uses cookies and invisible pixels to speed up your navigation on the Site, recognize you and allow you to access your privileges and track your use of the Site.

1. 
   Cookies are small pieces of information that are stored as text files by your Internet browser on your hard drive. Most Internet browsers are initially configured to accept cookies. You can configure your browser to refuse cookies from websites or to remove cookies from your hard drive, but if you do so, you will not be able to access or use certain portions of the Site. We need to use cookies to enable you to select products, place them in your shopping cart and purchase them. If you do so, we keep track of your browsing activity and a record of your purchases. COOKIES FROM THE SITE DO NOT AND CANNOT INFILTRATE A USER’S HARD DRIVE IN ORDER TO GATHER A USER’S CONFIDENTIAL INFORMATION. Our cookies are not “spyware”.
2. 
   Web beacons help run cookies and help us determine whether a web page on the Site has been viewed and, if so, how many times. For example, any electronic image on the Site, such as an advertising banner, may function as a pixel tag.
3. 
   We may use the services of third party companies to help us adapt the content of the Site for users or to handle advertising for us. These companies may use cookies and web beacons to measure the effectiveness of advertisements (such as which web pages visited or products purchased and in what quantity). Any information these third parties collect using cookies and web beacons is not linked to the personal information collected by us.
4. 
   For example, Facebook collects certain information using cookies and web beacons to determine which web pages are viewed or which products are purchased. Please note that any information collected by Facebook using cookies and web beacons is not linked to users' personal information collected by us.
5. 
   Log files. As is the case with most Web pages, the Site's server automatically recognizes the Internet URL from which you access the Site. We may also retain your Internet protocol (“IP”) address, Internet service provider, and date and time stamp for system administration, order verification, internal marketing, and system troubleshooting. (An IP address can indicate your computer's location on the Internet.)

Article 3 – Use and Distribution of Information

We want to provide you with excellent service, an efficient, serious, personalized experience and offer you the best products. Therefore, we may use your personal data to help you and make the Site easier to use, for example by not having to enter information multiple times or by making it easier to quickly find information, products and services. We also use your personal data to fulfill your order, provide customer service and communicate with you through personalized emails and newsletters, including to keep you informed of new products and services we offer, promotions, results competitions, or content such as makeup tips or to ask your opinion on our services. We also use this information to improve the design and content of our Site, improve our marketing reach and efforts, and create content that is of most interest to you. We also use this information to communicate with you regarding your customer service questions, your returns or any other request from you.

We process your personal data in accordance with the legal bases provided for by applicable data protection legislation. These legal bases may include your consent, where this is required, the performance of a contract to which you are a party or the legitimate interest we pursue, as described in our privacy policy.

We keep your personal data for no longer than is necessary to achieve the purposes for which they are processed. The duration of retention of personal data depends on the purposes for which we collect and use it, the duration of your contractual relationship with us and/or what is necessary to comply with applicable laws and regulations as well as to establish, exercise or defend our legal rights.

In order to achieve the purposes described above, we may be required to communicate certain personal data, in compliance with data protection regulations, to recipients or in the following cases (i) technical or functional subcontractors (such as as the host), service providers, professional advice to ensure the operation of the Site and the provision of our services, to the exclusion of any other use (in particular advertising or commercial). Said subcontractors have limited access to data in the context of the execution of their tasks, have a contractual obligation of confidentiality and protection; (ii) as part of “due diligence” relating to a merger, acquisition or other commercial transaction (or as part of the implementation of one of these operations), intended for jarential sellers or buyers as well as than to their advisors.

We do not sell, lend, trade or disclose your personal data or banking information to anyone except for fraud prevention or investigation purposes. . In this case, we may be asked to share the data collected with government agencies or other companies assisting us. We may do so when: (1) permitted or required by law; or (2) when we are trying to protect you from unauthorized transactions or prevent an unauthorized transaction or jarential fraud; or (3) when we are investigating fraud that has already occurred. This information is never communicated to these companies for commercial purposes.

We keep your personal data for no longer than is necessary to achieve the purposes for which they are processed. The duration of retention of personal data depends on the purposes for which we collect and use it, the duration of your contractual relationship with us and/or what is necessary to comply with applicable laws and regulations as well as to establish, exercise or defend our legal rights.

Article 4 – Commitment regarding Data Security

To protect your personal information, we take reasonable precautions and follow industry best practices to ensure that it is not lost, misused, accessed, disclosed, altered or destroyed. Your personally identifiable information is kept secure and encrypted during transmission. For payments, we use a certified payment gateway provider. All credit card information is encrypted by the Payment Card Industry Security Standard (PCI-DSS). All payment gateways adhere to Standard Glitter set by PCI-DSS as overseen by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express and Discover. Therefore, we do not see or store your credit card information.
Although we use industry standard precautions to protect your personal information, we cannot guarantee perfect security.

Article 5 – Transfer of data internationally

In the event that personal data collected on this Site is transferred to servers located outside the European Union, we will take appropriate measures to ensure that the recipient adequately protects your personal data, for example:

1. ensuring that there is an adequacy decision from the European Commission in the case of transfers outside the EEA or from the UK Government in the case of transfers outside the UK;
2. having in place standard contractual clauses with the recipient which have been approved by the European Commission (or the UK Government for transfers outside the UK in due course);
3. any other mechanism authorized by law.

Article 6 - Your rights

When we process your personal data, you benefit from a number of rights established in the applicable laws in this area and you can exercise these rights at any time. Below we give you an overview of these rights and what they mean for you.

• The right to access and correct your personal data: You have the right to access the personal data we hold about you, as well as to correct, update or supplement it at any time.
• The right to delete your personal data: You have the right to ask us to delete your personal data. However, this is not an absolute right and we may have legitimate, legal and regulatory reasons for retaining your personal data.
• The right to object: In certain circumstances, you have the right to object to certain types of processing based on grounds relating to your particular situation. If you exercise this right, we will stop using your personal data for this purpose unless we can demonstrate compelling legitimate grounds for continuing to process your personal data which override your interests, rights and freedoms.
• The right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time.
• The right to restriction of processing: In certain circumstances, you have the right to restrict the processing of your personal data if: (i) you do not believe that the personal data we hold about you is accurate; or (ii) you consider that the personal data is not lawfully processed, but instead of deleting the personal data you would prefer that we restrict the processing of it; or (iii) we no longer need your personal data for the purposes for which we collected it, but you need the data to establish, exercise or defend legal claims; or (iv) you have objected to the processing of your personal data and are waiting for us to verify whether the interests linked to this opposition outweigh the legitimate grounds for processing your data.
• The right to data portability: Your personal data is transferable. This means that it can be moved, copied or transmitted electronically. However, this right only applies to personal data that you have provided to us and where the processing: (i) is based on your consent or takes place for the performance of a contract; and (ii) takes place by automated means.
• The right to lodge a comMonochromet with a supervisory authority: If you wish to lodge a specific comMonochromet against Si Si La Paillette for the way in which your personal data has been processed, you can lodge a comMonochromet with the Commission Nationale de la Paillette. Informatique et Libertés (CNIL), 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07

Article 7 – Unsubscriptions / Corrections

If you wish :

– Correct or update your personal data

– Stop receiving emails to your email address

– Delete all personal data we have about you

– ComMonochrome

– Request more information,

Please send your request to coucou@sisilapaillette.fr .

Or at the address:

Si Si La Paillette SAS, 16 rue Daval, 75011 PARIS.

Article 8 – Update of this confidentiality policy

If we change or update this Privacy Policy, we will post the changes and updates on the Site so that you are always aware of the information we collect, use and disclose. If you have any questions regarding our Privacy Policy, please contact us at coucou@sisilapaillette.fr