PRIVACY POLICY

Yassoua is the Data Controller for the Data collected through this Website; Only with regard to Facebook Business Tools, (by way of example only, Facebook cookies, plug-ins and pixels) Yassoua Paris S.A.S. and Facebook Ireland Limited, whose registered office is located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter "Facebook"), act as Joint Data Controllers, on the basis of a specific joint controller agreement, in order to measure the level of interaction between the websites visited based on the preferences of the Data Subjects and to provide targeted advertising on the social network. Further information on how Facebook Ireland processes the Data, including the legal basis relied upon by Facebook Ireland and how to exercise your rights vis-à-vis Facebook Ireland, is available in Facebook Ireland's Data Use Policy at Facebook.

The following Data are processed:

Browsing data: such as IP addresses or domain names of computers used by users who connect to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with the data subjects, but by their very nature, they could, through processing and association with data held by third parties, allow the identification of users. This data is used solely to obtain anonymous statistical information on the use of the Website and to verify its proper functioning and is deleted immediately after processing. The Data could be used to determine liability in the event of hypothetical computer crimes against the Website: to this end, web contact data could be retained in accordance with this purpose and limited to it. From the IP address and the domain name of the computers used, it will be possible, within the limits of determining liability, to retrieve other user identification data (in particular, last name, first name, email address, phone number, etc.).

Data provided by the user: such as identification data, like last name, first name, email address, phone number, etc.; any other data provided, for example, when registering on the Website in the special section, or when filling out any data collection form on the Website, or when requesting the provision/activation of a Yassoua service, such as the Newsletter Service

Cookies: for information on the cookies present on the Yassoua Website, please refer to the Cookie Policy.

Protecting the safety and privacy of minors is very important to us. By signing up on the website in the appropriate section, filling out Data collection forms on the website, or requesting the provision of/subscription to the Newsletter service, the Data Subject confirms that they are 18 years of age or, at the very least, not younger than the age specified by the legislation of their country of residence that provides other age limits.

The personal data provided by the Data Subjects through the Yassoua website is collected and processed for the following purposes and on the following legal bases:

without prior consent for the needs of the service and, in particular, for:

— the performance of the contract and/or pre-contractual obligations, namely:

— the use of the website and any technical assistance;

— the management of a contact request from the Data Subject;

the registration and access to the "My Account" area by the Data Subject;
the management of payments and/or the finalization of product purchase orders;

the fulfillment by the Data Controller of its legal obligations, such as:
compliance with obligations provided for by national and European laws, regulations or legislation, or imposed by the competent authorities;

the pursuit of a legitimate interest of the Data Controller:

the management and maintenance of the website: the Controller's interest relates to the general interest of a company in ensuring business operations, also through the operation of the website, and any improvements to the service offered;

reference should be made to the analytical cookies described on the website to collect statistics in order to optimize and improve navigation on the website without identifying the user: the Controller's interest lies in the general interest of a company in becoming aware of any critical points or suggestions to improve the operation of the company. Note that these analytical cookies comply in France with the CNIL guidelines and recommendations regarding cookies and other trackers, and more specifically audience measurement cookies;

sending to the Data Subject, when they are already our customer and their contact details have been collected directly from them, commercial communications relating to services and products of the Data Controller similar to those already used; the Controller's interest relates to the general interest of a company in promoting its services and is considered legitimate, as it is consistent with the reasonable expectations of the Data Subjects, given the relationship between them and the Data Controller itself. Each email sent will allow the data subjects, by clicking on the appropriate link, to easily and free of charge refuse any subsequent communication.

The provision of the Data is mandatory and any refusal will make it impossible for the Company to perform its contractual obligations, fulfill its legal obligations, or respond to your requests. With regard to the purposes referred to in paragraph B, the provision of personal data is optional and their use is subject to the explicit consent of the Data Subject. Any refusal to consent will have no other effect than the inability to inform the data subjects of the Company's initiatives that may interest them and the inability to analyze their purchasing habits and preferences, as well as to use measurement and interaction tools with Facebook.

The processing of Data of the Data Subjects is carried out - by electronic means - through the operations of collection, recording, updating, organization, storage, consultation, preparation, modification, selection, extraction, comparison, use, interconnection, blocking, cancellation and destruction of Data. The Data will be processed by the Company and its employees using computer systems (as well as by manual means) in accordance with the principles of fairness, loyalty and transparency provided for by the applicable legislation on personal data protection and the confidentiality of the Data Subject and its rights by implementing appropriate technical and organizational measures to ensure a level of security appropriate to the risk. Specific security measures are observed to prevent data loss, unlawful or improper use and unauthorized access.

Regarding the purposes set out in point (Purposes of processing), the Data will be processed throughout the duration of the relationship in order to achieve the above-mentioned purposes. Data necessary for the fulfilment of any legal obligations will also be retained thereafter, in compliance with such obligations and in accordance with the retention periods provided for by the applicable regulations from time to time. For the Data provided for the purposes set out in point B, 1. (marketing) and 2. (profiling, Purposes of processing), given that the stored personal data relates to purchases of “premium” products and that the average annual purchase frequency for each customer is spread over time, the Data provided by you will be retained for a maximum period of 3 years, considering that this period is appropriate and proportionate both to the purposes to be achieved and to the type of personal data processed. At the end of this period, the data will be deleted or anonymised and, in any event, the Data Subjects may always give their consent again to the Company’s processing for the same purposes.

For the Data provided for the (use of Facebook Business Tools, Purposes of processing), the Data will be processed in accordance with the provisions of the Facebook Data Use Policy, available on Facebook. For the Data provided for the purposes set out in the use of Facebook’s custom audience services. Purposes of processing, the Data will be processed by Yassoua for the duration of its contractual relationship with Facebook and until the Data Subject amends their consent or requests its withdrawal.

Our Privacy Policy may change over time, so we encourage users to review this page regularly. To this end, the policy highlights the date of the update.

Last updated: December 2022.