Personal data protection policy

 

XENLED.COM builds strong and lasting relationships with its users, based on mutual trust: ensuring the security and confidentiality of its users' personal data is an absolute priority for FRANCE-XENON SAS.

FRANCE-XENON SAS complies with all French and European regulations and laws relating to the protection of personal data.

FRANCE-XENON SAS applies an extremely strict policy to guarantee the protection of the personal data of its users:

- Each FRANCE-XENON SAS user remains in control of their data. FRANCE-XENON SAS does not dispose of it freely.

- They are treated in a transparent, confidential and secure manner.

- FRANCE-XENON SAS is committed to a continuous process of protecting the data of its users, in accordance with the amended Data Protection Act of 6 January 1978 (hereinafter "LIL") and the General (EU) Regulation on the protection data from April 27, 2016 (hereinafter “GDPR”).

- FRANCE-XENON SAS has a safety referent as its Chairman and Chief Executive Officer

- User data is hosted on a maximum of four (4) redundant servers.

PURPOSE OF THIS POLICY

FRANCE-XENON SAS wishes to inform you through this policy of how we protect your personal data processed via the site https://www.xenled.com/

This policy describes how FRANCE-XENON SAS processes the personal data of visitors and users (hereinafter the "User(s)") when browsing the www.xenled.com website (hereafter the "User(s)"). -after the “Site”). 

This Policy may be modified, supplemented or updated in order to comply with any legal, regulatory, jurisprudential and technical developments. However, the User's Personal Data will always be processed in accordance with the policy in force at the time of their collection, unless a mandatory legal requirement were to provide otherwise and would apply retroactively.

This policy is an integral part of the General Conditions of Sale of the Site.

IDENTITY AND CONTACT DETAILS OF PROCESSING RESPONSIBLE

Legal reminder: The data controller is, within the meaning of the LIL, the person who determines the means and purposes of the processing. Processor is a person processing personal data on behalf of the controller. He acts under the authority of the data controller and on his instructions.

The person responsible for processing Personal Data is:

  1.      For Personal Data collected as part of the creation of the User's personal account  and its navigation on the Site:   FRANCE-XENON SAS ,  Simplified Joint Stock Company with capital of €30,000, registered with the RCS of Saint Etienne under the number 751 761 412 and whose registered office is located at 4 TER RUE DU STADE - CS50 020 - 42420 Lorette ( above and hereinafter "  FRANCE-XENON SAS  "). FRANCE-XENON SAS is represented by Mr. CALTAGIRONE Anthony, its Chairman. 

Whether it is a data controller or a subcontractor, FRANCE-XENON SAS takes the appropriate measures to ensure the protection and confidentiality of the personal information it holds or processes in compliance with the provisions of the LIL and the GDPR. . For more information about the services offered by FRANCE-XENON SAS, you can refer to the General Conditions of Sale of the Site (https://www.xenled.com/fr/content/3-conditions-generales-de-vente) .

DATA COLLECTION & ORIGIN

All data concerning Users is collected directly from them.

FRANCE-XENON SAS undertakes to obtain the consent of its Users and/or to allow them to oppose the use of their data for certain purposes, as soon as this is necessary.

In all cases, Users are informed of the purposes for which their data is collected via the various online data collection forms.

PURPOSE OF THE DATA COLLECTED

1. Necessity of collection.

During the creation of his account and the ordering process, the User communicates certain Personal Data. If the User does not wish to provide the information requested of him, the User may not be able to access certain parts of the Site, and FRANCE-XENON SAS may be unable to respond to his request, in particular to validate his order.

2. Purposes

The collection of your Personal Data has the following legal basis: - the performance of the contractual obligations of FRANCE-XENON SAS - the legitimate interest of FRANCE-XENON SAS to ensure the best quality of its services and to provide its Users with the best possible follow-up of their orders - the legitimate interest of FRANCE-XENON SAS to carry out optional satisfaction surveys on its services with a view to improving them - the consent of its Users when this is required by the regulations in force, in particular with regard to commercial prospecting and cookies.

The data of FRANCE-XENON SAS Users are mainly processed to: - allow them to browse the site - allow orders to be taken by the website with the proposal of the various means of delivery available in correlation with their address - put them in contact with a Professional partner of FRANCE-XENON SAS whose list is on the site (https://www.xenled.com/fr/magasins) - allow them to manage their Orders (obtain notifications, modify them, cancel them) - allow them to be optimally taken care of by France XENON SAS

In the alternative, User data is also collected to: - prevent and fight against computer fraud (spamming, hacking, etc.) - improve navigation on the Site - conduct optional satisfaction surveys, after ordering, on FRANCE's services - XENON SAS (these surveys are carried out anonymously) – Sending of a reduction code on the day of the customer's birthday – Sending of a weekly maximum newsletter according to the customer's choice on his account.

You will find more details on the management of cookies allowing us to achieve this purpose in our  Cookies Management Charter,  integrated into this privacy policy.

The mandatory or optional nature of the personal data requested and the possible consequences of a lack of response with regard to the Users of FRANCE-XENON SAS are specified during their collection(s).

TYPES OF DATA PROCESSED

FRANCE-XENON SAS may process all or part of the following data: - Name (and birth name), first name, date of birth - Telephone number, email address, postal address (possibly digicode) - Password (Encrypted and inaccessible to any entity).

 

FRANCE-XENON SAS is likely to process, as Data Controller, all or part of the following data: 

- to allow navigation on the Site or use of the Application: connection and use data for the Site 

- to prevent and fight against computer fraud (spamming, hacking, etc.): computer equipment used for browsing, the IP address

- to improve navigation on the Site: connection and usage data, connection time 

- to conduct optional satisfaction surveys on FRANCE-XENON SAS: email address 

- to carry out communication campaigns (sms, email): telephone number, email address

NON-COMMUNICATION OF PERSONAL DATA

The User's Personal Data will not be transmitted to commercial or advertising actors.

The User's Personal Data may be processed by subsidiaries of FRANCE-XENON SAS, in absolute compliance with the principle set out above, exclusively in order to achieve the purposes of this policy. 

Within the limits of their respective powers and for the purposes mentioned above, the main people likely to have access to the data of FRANCE-XENON SAS Users are mainly our customer service agents. 

FRANCE-XENON SAS also uses the services provided by several specialized companies (mailing, audience analysis , payment solution providers, carriers, IT service providers ), the list of which can be communicated to the persons concerned on request addressed to RGPD@FRANCE-XENON .COM If these companies use servers outside the European Union, the appropriate measures resulting from the GDPR legal framework are taken to ensure that the recipients concerned ensure a level of security comparable to that resulting from compliance with the GDPR legal framework and present the guarantees required in this respect, in particular through the conclusion of specific contracts and standard contractual clauses established by the European Commission to regulate and secure the transfer of your data to these service providers.

DATA STORAGE DURATION

We keep your data only for the time necessary for the purposes pursued, in accordance with legal requirements.

 

By simple email to our customer service: [email protected]   or on the dedicated email address:  rgp [email protected]you can request the deletion of your customer account before these deadlines.

Finally, it is specified that certain personal data is kept longer, for the purposes of (i) compliance with applicable legal and regulatory obligations (such as document retention, invoicing or the fight against fraud), and/or ( ii) to ensure the establishment, exercise or defense of FRANCE-XENON SAS' legal rights during the applicable limitation period. 

USER RIGHTS

Whenever FRANCE-XENON SAS processes Personal Data, FRANCE-XENON SAS takes all reasonable measures to ensure the accuracy and relevance of the Personal Data with regard to the purposes for which FRANCE-XENON SAS processes them.

In accordance with the European regulations in force, the Users of FRANCE-XENON SAS have the following rights: - right of access (article 15 RGPD) and rectification (article 16 RGPD), update, completeness of the data of the Users - right to block or delete personal User data (Article 17 of the GDPR), when they are inaccurate, incomplete, ambiguous, outdated, or whose collection, use, communication or storage is prohibited  (find out more)  - right to withdraw consent at any time (article 13-2c GDPR) - right to limit the processing of User data (article 18 GDPR) - right to oppose the processing of User data (article 21 GDPR)  (find out more) - right to the portability of data that Users have provided, when this data is subject to automated processing based on their consent or on a contract (article 20 GDPR) - right to define the fate of User data after their death and to choose to whom FRANCE-XENON SAS will have to communicate (or not) their data to a third party that they will have previously designated  (find out more)

As soon as FRANCE-XENON SAS becomes aware of the death of a User and in the absence of instructions from him, FRANCE-XENON SAS undertakes to destroy his data, unless their conservation proves necessary for probative purposes or for meet a legal obligation (such as keeping billing history).

If the User wishes to know how FRANCE-XENON SAS uses his Personal Data, ask to rectify it or oppose its processing, the User can contact FRANCE-XENON SAS in writing at the following address: FRANCE-XENON SAS, 4 TER rue du Stade - CS50 020, 42420 Lorette or by email to [email protected].In this case, the User must indicate the Personal Data that he would like FRANCE-XENON SAS to correct, update or delete. Requests for the deletion of Personal Data will be subject to the obligations imposed on FRANCE-XENON SAS by law, in particular with regard to the conservation or archiving of documents. Finally, FRANCE-XENON SAS Users may file a complaint with the supervisory authorities, and in particular the CNIL (https://www.cnil.fr/fr/plaintes).

The person whose personal data is collected has the right:

– to request from the data controller access to personal data, the rectification or erasure thereof, or a limitation of the processing relating to the data subject,

– to oppose the processing,

– the portability of its data,

– lodge a complaint with a supervisory authority,

– to withdraw consent at any time, without affecting the lawfulness of the processing based on the consent given before its withdrawal, this right existing exclusively when the processing is based on Article 6, paragraph 1, point a ), or on Article 9, paragraph 2, point a) of the GDPR, i.e. on the consent of the data subject to the processing of his or her personal data for one or more specific purposes.

“COOKIES” AND INTERNET TAGS

  1.      " COOKIES "

A "cookie" is a small information file sent to the User's browser and saved within the User's terminal (eg computer, smartphone), (hereinafter "Cookies"  )  . This file includes information such as the User's domain name, the User's Internet access provider, the User's operating system, as well as the date and time of access. Cookies do not in any way risk damaging the User's terminal.

FRANCE-XENON SAS is likely to process the User's information concerning his visit to the Site, such as the pages consulted, the searches carried out,  the products in the basket . This information allows FRANCE-XENON SAS to improve the content of the Site, the navigation of the User and allows to completely ensure the ordering process.

In accordance with the applicable provisions as well as the recommendations of the CNIL, no cookie is deposited if the user has not previously consented to this deposit. 

Express consent is collected by a device informing the user of the cookies used, their publishers and their purposes; this device allowing him to accept or refuse the deposit of cookies.

The period of validity of the user's consent regarding cookies is 12 months, at the end of this period, the consent is again required.

For information, for Cookies facilitating navigation and/or the provision of services offered by the Site, the User can configure his browser to allow him to decide whether or not he wishes to accept them so that Cookies are saved in the terminal or, on the contrary, they are rejected, either systematically or according to their issuer. The User can also configure his browser software so that the acceptance or refusal of Cookies is offered to him from time to time, before a Cookie is likely to be saved in his terminal. FRANCE-XENON SAS informs the User that, in this case, the functionalities of its navigation software may not all be available.

If the User refuses the registration of Cookies in his terminal or his browser, or if the User deletes those which are registered there, the User is informed that his navigation and his experience on the Site may be limited. This could also be the case when FRANCE-XENON SAS or one of its service providers cannot recognise, for technical compatibility purposes, the type of browser used by the terminal, the language and display settings or the country from which the terminal appears to be connected to the Internet.

If necessary, FRANCE-XENON SAS declines all responsibility for the consequences linked to the degraded functioning of the Site and the services possibly offered by FRANCE-XENON SAS, resulting (i) from the refusal of Cookies by the User (ii) from the impossibility for FRANCE-XENON SAS to record or consult the Cookies necessary for their operation due to the choice of the User. For the management of Cookies and User choices, the configuration of each browser is different. It is described in the help menu of the browser, which will allow you to know how the User can modify his wishes in terms of Cookies. 

At any time, the User can choose to express and modify his wishes in terms of Cookies. FRANCE-XENON SAS may also use the services of external service providers to help it collect and process the information described in this section.

Finally, by clicking on the icons dedicated to the social networks Twitter, Facebook, Linkedin and Google Plus appearing on the FRANCE-XENON SAS Website and if the User has accepted the deposit of cookies on the FRANCE-XENON SAS Website, Twitter , Facebook, Linkedin and Google Plus may also place cookies on your devices (computer, tablet, mobile phone).

These types of cookies are only placed on your terminals if you consent to them. At any time, the User may nevertheless revoke his consent to FRANCE-XENON SAS depositing this type of cookie.

  1.      INTERNET TAGS

FRANCE-XENON SAS may occasionally use Internet beacons (also called "tags", or action tags, one-pixel GIFs, transparent GIFs, invisible GIFs and one-to-one GIFs) and deploy them through a partner web analytics specialist who may be located (and therefore store the corresponding information, including the User's IP address) in a foreign country.

These tags are placed both in online advertisements allowing Internet users to access the Site, and on the various pages thereof. This technology allows FRANCE-XENON SAS to evaluate visitors' responses to the Site and the effectiveness of its actions (for example, the number of times a page is opened and the information consulted), as well as the use of this Site by the User. The external service provider may possibly collect information on visitors to the Site and other Internet sites using these beacons, compile reports on the activity of the Site for the attention of FRANCE-XENON SAS, and provide other services relating to the use of it and the Internet. 

SOCIAL NETWORKS

The FRANCE-XENON SAS User has the option of clicking on the icons dedicated to the social networks Twitter, Facebook, Linkedin and Google Plus appearing on the Site or in the FRANCE-XENON SAS Application.

Social networks improve the user-friendliness of the Site and help promote it through sharing. Video sharing services make it possible to enrich the FRANCE-XENON SAS Site with video content and increase its visibility.

When the User clicks on these buttons, FRANCE-XENON SAS may have access to the personal information that the User has indicated as public and accessible from his Twitter, Facebook, Linkedin and Google plus profiles. However, FRANCE-XENON SAS does not create or use any database independent of Twitter, Facebook, Linkedin and Google Plus from the personal information that the User may publish there and FRANCE-XENON SAS will not process any data relating to its privacy through this.

If the User does not want FRANCE-XENON SAS to have access to personal information published in the public space of its profiles or social accounts, the User must then refuse the corresponding cookies via the device provided for this purpose on the website, or use the means made available to it by Twitter, Facebook, Linkedin and Google Plus in order to limit access to its data.

SECURITY

FRANCE-XENON SAS implements all technical and organizational measures to ensure the security of personal data processing.

As such, FRANCE-XENON SAS takes all necessary precautions, with regard to the nature of the data and the risks presented by the processing, in order to preserve the security of the data and, in particular, to prevent them from being damaged, or that unauthorized third parties have access to it (physical protection of the premises, authentication processes with personal and secure access via confidential identifiers and passwords, logging of connections, encryption of certain data, etc.).

PERSONAL INFORMATION AND MINORS

In principle, the Site is intended for adults capable of contracting obligations in accordance with the legislation of the country in which the User is located.

A minor User under the age of 16 or incapable must obtain the prior consent of their legal guardian before entering their data on the Site.

The age of 16 can be lowered to 13 depending on the local regulations of the User's habitual residence, under Article 8 of the GDPR  (15 in France) .

What is a cookie ?

No, unfortunately it's not about the delicious chocolate chip cookies. When you visit a website, the publisher places cookies on your browser. This text file allows the website to improve your experience on the site in order to remember your computer on future visits.

OUR COOKIE PARTNERS

The use of cookies on our site are intended for our partners:

Bing: Advertising Network

Facebook Pixel: identifies Facebook visitors

Google Ads: Measures the performance of Google campaigns

Google Analytics: Helps us measure our audience

USE OF GOOGLE ANALYTICS

Personal data processed – Google processes the data mentioned in its privacy policy https://support.google.com/analytics/answer/6004245?hl=fr

https://policies.google.com/privacy?hl=fr#infocollect

https://policies.google.com/technologies/partner-sites

This data includes in particular the IP address of the devices used to consult the site.

Purposes – This processing is used for analysis and statistical study of the use of our site.

Legal Basis – Processing is necessary for the purposes of the legitimate interests we pursue of improving and optimizing our website for the benefit of users. It is based on Article 6(1)(f) GDPR. The request for data is of a contractual nature. The data subject is not required to provide this data and may object to their processing at any time. To prevent the collection of data relating to its use of the site and the processing of this data by Google, the person concerned must follow the instructions of Google:  http://tools.google.com/dlpage/gaoptout .

USING FACEBOOK PIXEL

Facebook processes the data mentioned in its privacy policy

https://fr-fr.facebook.com/business/gdpr

Purposes – This processing is used for analysis and statistical study of the use of our site.

Legal Basis – Processing is necessary for the purposes of the legitimate interests we pursue of improving and optimizing our website for the benefit of users. It is based on Article 6(1)(f) GDPR.

USE OF BING

Microsoft processes the data mentioned in its privacy policy

https://privacy.microsoft.com/fr-fr/privacystatement

Purposes – This processing is used for analysis and statistical study of the use of our site.

Legal Basis – Processing is necessary for the purposes of the legitimate interests we pursue of improving and optimizing our website for the benefit of users. It is based on Article 6(1)(f) GDPR.

USE OF GOOGLE ADS

Personal data processed – Google processes the data mentioned in its privacy policy 

https://business.safety.google/intl/fr_fr/compliance/#!?modal_active=none

https://policies.google.com/technologies/partner-sites

This data includes in particular the IP address of the devices used to consult the site.

Purposes – This processing is used for analysis and statistical study of the use of our site.

Legal Basis – Processing is necessary for the purposes of the legitimate interests we pursue of improving and optimizing our website for the benefit of users. It is based on Article 6(1)(f) GDPR. The request for data is of a contractual nature. The data subject is not required to provide this data and may object to their processing at any time. To prevent the collection of data relating to its use of the site and the processing of this data by Google, the person concerned must follow the instructions of Google:  http://tools.google.com/dlpage/gaoptout .

CONTACT US

If the User has questions or complaints regarding FRANCE-XENON SAS's compliance with this Policy, or if the User wishes to provide FRANCE-XENON SAS with recommendations or comments aimed at improving the quality of this Policy , the User may contact FRANCE-XENON SAS in writing at the following address: FRANCE-XENON SAS, 4 TER rue du Stade - CS50 020, 42420 LORETTE or [email protected].