Privacy policy
Privacy Policy
Updated on 21/11/2023
Personal data protection
New Duralex International, a company with a share capital of 4,000,000 euros, headquartered in France at La Chapelle-Saint-Mesmin (45380) - 7 rue du Petit Bois, registered in the Orléans Trade and Companies Register under number 892 108 663 (hereinafter referred to as"NDI") collects personal data from users (hereinafter referred to as"Customer(s)") of the www.duralex.com website (hereinafter referred to asthe "Site").
The personal data collected on this Site is processed, automatically or otherwise, by NDI. This processing is subject in particular to the French Data Protection Act no. 78-17 of January 6, 1978, as amended, and to the General Regulation on the Protection of Personal Data no. 2016/679 (hereinafter referred to as "RGPD").
The information collected is recorded in the customer file, which has been declared to the CNIL (n° 1672800).
This personal data protection policy (hereinafter referred to as"Policy") describes how NDI, as data controller, processes the personal data of its Customers.
NDI collects, stores and processes personal data concerning the Customer when the latter uses the Site. The purpose of this Policy is therefore exclusively to manage the processing of data collected directly on the Site and to describe the manner in which the personal data of Site Customers is collected and processed by NDI.
This Policy may be modified, in particular to reflect any changes in the way NDI processes and collects Customer data on the Site. The date of any updates will be specified at the top of this document.
Data controller
The personal data provided by the Customer when registering for certain sections of the Site are intended exclusively for NDI (Data Controller), which determines the purposes and means of their processing and which may transfer them to its service providers (data processors). Data processing by these subcontractors is always limited to the purposes defined by NDI.
Purposes of processing
The purpose of data processing is to enable users of the Site to benefit from the Site's services and animations, in particular thematic offers or content. This processing by NDI is necessary for the administration of its Site, the performance of its services, the promotion and sale of its products, correspondence with its Customers and invoicing. This processing is also necessary to enable NDI to comply with its legal obligations and to meet certain legitimate management interests.
Details of the purposes are given below:
- Processing carried out to meet contractual obligations
The processing of personal data is necessary for the performance of the contract between the customer and NDI. In general, the personal data collected for the purposes of distance selling is mandatory for the confirmation and validation of the Customer's order, as well as for its follow-up and shipment; without it, the Customer's order cannot be processed.
Unless otherwise specified on the form, the various fields on the form during the order process are mandatory data to be completed by the Customer in order to enable the order to be placed. This data enables NDI to improve its communications and services to the Customer. This data may be transmitted to NDI's service providers for the sole purpose of carrying out the order and, in particular, its payment and delivery, depending on the options selected by the Customer at the time of ordering. The provision of personal data also enables NDI to communicate with the Customer regarding the Customer's account or the contractual relationship between NDI and the Customer (for example, to inform the Customer of changes to the Site, the Policy or updates).
The following purposes are thus targeted:
▪ Customer account, shopping cart and order management
▪ Management of delivery operations
▪ Management of payment operations
When the customer makes a payment on the Site, payments are secured by our banking service provider: the customer's credit card details are encrypted using SSL protocol and are never transmitted unencrypted over the network. No banking data is stored by NDI. Banking transactions are carried out directly between the Customer and NDI's banking service provider. Payment can also be made by Paypal account. If the Customer has a Paypal account, payment will be made using the process set up by this company: payment using the email address and password provided when the Paypal account is created. All of the customer's bank details are collected solely by our certified payment service provider, which guarantees payment security.
▪ Management of customer relations by telephone or e-mail, after-sales service follow-up, product returns and refunds.
- Processing on the basis of legal obligations
NDI uses the customer's personal data to meet its legal obligations and/or defend its interests in court, in particular for the purposes of :
▪ Proof of transactions or operations
▪ Legal or administrative requirements incumbent on NDI, needs of its insurers, or for auditing purposes
▪ Management of requests to exercise the rights of data subjects
- Processing based on customer consent
The Customer has agreed to the processing of his/her personal data by NDI by means of express consent (opt-in), in particular when :
▪ Creating a Customer account
▪ Acceptance of the deposit of cookies to offer content and targeted advertising tailored to your centers of interest, to carry out measurements to improve your experience on the Site and to share on social networks
▪ Newsletter subscription
▪ Participation in competitions
Customers may withdraw their consent at any time by clicking on the unsubscribe link included in all commercial communications.
- Processing carried out on the basis of legitimate interests
NDI has a business interest in processing Customer data that is justified, balanced and does not tend to invade the Customer's privacy. Where the processing carried out by NDI is based on its legitimate interest, the Customer may object to such processing if his interests or fundamental freedoms are found to prevail over NDI's legitimate interests.
Such processing may be carried out in the context of :
▪ commercial canvassing of customers for the purpose of advertising NDI products
▪ Sending satisfaction surveys for the purpose of improving NDI's services
▪ Organizing commercial events to build customer loyalty
▪ To combat fraud in the payment of orders
▪ Management of product reviews in order to improve the goods and services offered by NDI
▪ Recording exchanges between customer service and the customer by telephone for the purpose of improving customer service.
▪ Statistical analysis to manage and improve NDI services
▪ Management of social networks for the purpose of advertising NDI products and customer service
▪ Management of disputes with customers in order to defend NDI's interests in court.
Data collected
▪ Identification data (surname, first name(s), e-mail address, telephone number, billing and delivery address)
▪ Site username(s) and password(s)
▪ Information relating to purchases and orders and chosen means of payment
▪ Electronic identification data available on or from the Customer's computer, such as "cookies" or "IP" addresses.
The customer's personal data is collected when the customer creates a customer account on the Site, registers on the Site and gives explicit consent to receive newsletters and commercial communications, places an order on the Site and proceeds to payment, contacts customer service.
Data not collected
NDI does not process data relating to racial or ethnic origins, political or religious opinions, philosophical beliefs or trade union membership, the processing of genetic data, or the life or sexual orientation of the Customer.
As the Site is intended for adults, NDI does not wish to collect or process personal data relating to children under the age of sixteen (16). If it appears that data from children under the age of sixteen (16) has been transmitted to NDI via the Site or by telephone, NDI will not be able to process the order unless it has confirmation from the holders of parental authority. In any event, parents or guardians may object by contacting NDI by e-mail at the following address: dataprotectionofficer@lmfv.fr. Children under the age of majority at the time of collection of their personal data may obtain their deletion as soon as possible at the same address.
Data security
NDI takes the necessary technical and organizational security measures with respect to its employees and requires its data processors to guarantee the confidentiality of personal data and to protect them against accidental or unlawful destruction, modification, disclosure or unauthorized access, in accordance with the rules in force.
Data transfer
Customer data may be transferred to certain data processors located outside the European Economic Area. On the occasion of this transfer, Customer data is stored in compliance with legal protection and security obligations, in accordance with applicable European regulations (RGPD). In the event of a transfer, NDI requires its subcontractors to provide sufficient guarantees on the implementation of appropriate technical and organizational measures in order to achieve the requirements of European regulations and the protection of Customer data, including, where necessary, through the use of model contractual clauses provided by the European Commission pursuant to the RGPD or through any other valid transfer mechanism that may be put in place in the future. In the event of the cessation of data subcontracting or after the end of processing, NDI requires its subcontractors to destroy or return the data immediately with a prohibition on retaining a copy, unless otherwise provided by the law applicable in the territory where the subcontractor is established.
NDI also undertakes not to sell the Customer's personal data to partner brands for commercial purposes. The Customer's personal data remains the exclusive property of NDI.
In order to fulfill the above-mentioned purposes, NDI discloses personal data only to :
- Entities of the Group LA MAISON FRANCAISE DU VERRE ("LMFV")
Only authorized personnel of the LMFV Group (i.e. any entity, whatever its form, of which LA MAISON FRANCAISE DU VERRE (882 622 897 R.C.S. Châteauroux) holds, directly or indirectly, shares in capital or voting rights) whose activity justifies access to information, for purposes of internal audit, management of customer relations, including in particular management of customer information contained in the customer file, management of customer commercial relations, management of customer orders and after-sales claims/files, management of promotional operations and campaigns, improvement of NDI - Customer relations, management of purchases and payments, is authorized to access customer data.
Below is a list of LMFV Group entities that may be authorized to process your personal data for the associated purposes:
International Cookware
85, allée des Maisons Rouges
36000 Châteauroux
399 311 315 R.C.S. Châteauroux
Purpose of processing:
- Accounting processing
- Email routing and database hosting
- Subcontractors
Service providers and subcontractors perform services according to the instructions and on behalf of NDI only, in particular in connection with payment and delivery of the order.
NDI also uses commercial and technical subcontractors to whom data may be temporarily and securely transmitted, such as :
▪ Colissimo for order delivery
▪ DHL for order delivery
▪ Mondial Relay for order delivery
▪ Klaviyo for e-mail routing and customer relationship management (CRM)
▪ service providers who assist and support NDI in providing IT services, database maintenance and related software and applications; these service providers may have access to customer data to perform the tasks requested.
- Third parties to NDI
In the event of a restructuring, reorganization or transfer, in any form and for any reason whatsoever (including sale of goodwill, dissolution, liquidation, merger, etc.) of LMFV Group entities.
- Other third parties
NDI may share Customer personal data with other third parties only if (a) NDI is obliged to do so by virtue of its legal obligations or (b) if the sharing is lawful under applicable law.
Customer personal data may also be shared with certain regulated professions, such as lawyers, notaries and auditors, as part of the execution of their mandate or directly with judicial or administrative authorities in application of legal provisions.
Consent to processing
By giving their explicit consent (checkbox, voluntary registration, order), Customers may also receive information and offers by electronic mail (emailings and newsletters) issued exclusively by the Site Editor. The Customer may unsubscribe at any time. No use is made of this information without the Customer's consent (checkbox or voluntary registration), and it is neither transferred nor sold, unless the Customer expressly agrees to its transmission to the Site's partners.
Compulsory information is clearly identified (error message) when the Customer registers for one of the Site's sections. Optional information is used to get to know the customer better, so that we can offer content and services that meet his or her expectations as closely as possible.
Cookies
The Site uses techniques to collect information when the Customer publishes content or to track browsing patterns on the Site, in particular through the use of "cookies". A "cookie" is a file deposited in a dedicated area of the Customer's terminal (computer, tablet, cell phone or any other device optimized for the Internet), when the Site is consulted, enabling navigation to be tracked. Some cookies are essential for use of the Site, while others enable content displayed to be optimized and personalized. Some cookies may be used to store the contents of a shopping cart, others to record browsing parameters.
The aim of these techniques is to better understand the user's expectations and to improve the services offered, in particular to avoid the need for customers to reconnect, and to offer them more relevant themes or information.
The Publisher may use the information gathered in this way for analysis and research purposes, either internally in order to better meet the expectations of its users; or on behalf of external partners, in exclusively statistical, anonymous and non-identifiable form. Customers are free to refuse the installation of cookies by modifying the settings of their Internet browser. However, the Site cannot be held responsible for the consequences of these settings, in particular the limitation or deactivation of certain functionalities based on these techniques.
The different types of cookies are described below:
- Functional cookies
These are cookies that are essential for browsing the Site, enabling you to use the Site's main functions and secure your connection, such as :
▪ implementing security measures on the Site
▪ facilitating browsing by recording language preferences, connection identifiers or the contents of an order
▪ adapting the Site's presentation to the display preferences of the Customer's terminal (display resolution, etc.).
They also enable Customers to access reserved and personal areas of the Site directly, using identifiers or data previously entrusted to them by the Customer.
Functional cookies are not subject to customer consent.
- Analytical cookies
These cookies enable NDI to track the use and performance of the Site, and to compile statistics and volumes of visits to and use of the various elements of the Site. These cookies collect information on customer behavior on the Site by analyzing URLs (where visitors come from, which banners they click on, who directed them to the Site), as well as the times of visits.
In particular, these cookies enable us to:
▪ draw up statistics on Site traffic volumes (number of visits, pages viewed, etc.) and compile reports and statistics on the use of the various elements making up the Site (sections and content visited, browsing paths taken)
▪ to improve the Site accordingly
▪ to gain a better understanding of the products and services that customers prefer, in order to offer them more personalized communications and/or content on the Site
▪ detect any navigation difficulties
These cookies require the customer's prior consent to be stored on his or her terminal.
Deleting analytical cookies does not prevent browsing on the Site.
- Marketing cookies
These cookies help NDI to adapt its advertising on its Site.
In particular, these cookies make it possible to :
▪ Limit the number of times Customers see an advertisement or offer
▪ Display advertisements adapted to Customers' interests on the Site or outside the Site, depending on their terminal's browsing on the Site (personalized advertising), with their prior consent and according to the personal data provided by Customers to NDI.
▪ To combat click fraud (detection of publishers claiming to have a larger advertising audience than is actually the case).
These cookies require the customer's prior consent to be placed on their terminal.
Deleting marketing cookies does not prevent browsing on the Site.
With the exception of functional cookies, the recording of a cookie on a terminal depends on the user's choices, which he or she may freely express and modify at any time.
Users can configure their browser to accept or reject cookies on their terminal, either globally or on a cookie-by-cookie basis.
Each browser is configured differently to manage cookies and user choices. Each browser has its own cookie management system, described in the browser's "Help" menu, where you can find the information you need to modify your cookie preferences.
For further information on cookies and browser settings, please consult the CNIL website: https: //www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser.
Retention period
Personal data will be kept for as long as is necessary for the purposes for which it was collected:
- For a period of three (3) years from the date of the Customer's last activity on the Site or on one of NDI's electronic communication media (e.g. clicking on a link in a newsletter or emailing);
- In the event of an order, this period is extended to ten (10) years, in order to keep a history of orders (Products purchased, invoicing) and due to the warranty period of the Products (this data may be deleted at any time upon simple request by the Customer);
- For a period of thirteen (13) months for "cookies";
- If the Customer has expressly consented to receive commercial prospecting, NDI retains the Customer's personal data until the Customer unsubscribes or asks NDI to delete it.
Notwithstanding the above, the retention period may be different if: (i) the Customer exercises his right to delete data concerning him, under the conditions described below; (ii) a longer retention period is authorized or imposed by virtue of a legal or regulatory obligation. In the event of legal action, data may be retained until all legal remedies have been exhausted, after which it will be deleted or archived to the extent permitted by law. In particular, the customer's personal data may be archived in order to meet NDI's accounting and tax obligations, such as the obligation to keep invoices for 10 years (article L.123-22 of the French Commercial Code). For any clarification concerning the data retention period, the Customer may contact the Data Protection Officer using the contact details given below under the heading "Exercising your rights".
Exercise of rights
In accordance with the French Data Protection Act of January 6, 1978, as amended, and the RGPD, the Customer has the right to access, modify, rectify and delete data concerning him or her. The Customer also benefits from a right of opposition, a right to limitation of processing and portability of personal data. For processing based on consent, the Customer may withdraw consent at any time.
More specifically, the Customer has :
▪ Right of access: customers may obtain information concerning the processing of their personal data, as well as a copy of their personal data.
▪ Right of rectification: if the Customer considers that his/her personal data is inaccurate or incomplete, he/she may request that it be amended accordingly.
▪ Right to erasure: the Customer may request the erasure of personal data to the extent permitted by law.
▪ Right to restrict processing: customers may request that their personal data be restricted.
▪ Right to object: Customers may object to the processing of their personal data for reasons relating to a particular situation. Customers have the absolute right to object to the processing of their personal data for the purposes of commercial canvassing, including the profiling associated with such canvassing.
▪ Right to data portability: where this right is applicable, the Customer has the right to have personal data supplied to NDI returned to him or, where technically possible, transferred to a third party.
▪ The right to define directives concerning the conservation, deletion or communication of personal data, applicable after death.
▪ Right to withdraw consent: if the Customer has given his consent to the processing of his personal data, he has the right to withdraw his consent at any time via the unsubscribe link, which will not affect the legitimacy of the processing operations carried out prior to the withdrawal of his consent.
To exercise these rights, to ask any questions concerning the processing and to obtain communication of the information concerning him, the Customer must send a simple request accompanied by proof of identity by mail or e-mail to the following respective address: New Duralex International | Le Délégué à la protection des données, 7, rue du Petit Bois, 45380 La Chapelle-Saint-Mesmin | dataprotectionofficer@lmfv.fr.
The customer also has the right to lodge a complaint with the CNIL, the competent supervisory authority in France.