Legal notice

PRIVACY POLICY

ARTICLE 1: PREAMBLE

The purpose of this privacy policy is to inform users of the website:

  • How their personal data is collected. Personal data is considered to be any information that can identify a user, such as: their name, surname, age, postal or email address, location, or IP address (non-exhaustive list);
  • The rights they have regarding this data;
  • Who is responsible for the processing of the collected and processed personal data;
  • The recipients of this personal data;
  • The website’s cookie policy.

This policy supplements the legal notices and the General Terms of Use, which can be consulted by users at the following address:

https://twosixone.fr/policies/privacy-policy

 

ARTICLE 2: PRINCIPLES RELATED TO THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with Article 5 of European Regulation 2016/679, personal data must be:

  • Processed lawfully, fairly, and transparently with respect to the data subject;
  • Collected for specified, explicit, and legitimate purposes (see Article 3.1 of this policy) and not further processed in a manner incompatible with those purposes;
  • Adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
  • Accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that is inaccurate, with regard to the purposes for which it is processed, is erased or rectified without delay;
  • Retained in a form that permits the identification of data subjects for no longer than necessary for the purposes for which the data is processed;
  • Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful only if, and to the extent that, at least one of the following conditions is met:

  • The data subject has given consent for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject’s request;
  • The processing is necessary for compliance with a legal obligation to which the data controller is subject;
  • The processing is necessary to protect the vital interests of the data subject or another natural person;
  • The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
  • The processing is necessary for the purposes of legitimate interests pursued by the data controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject, particularly when the data subject is a child.

 

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED DURING WEBSITE NAVIGATION

Article 3.1: Data collected

The personal data collected as part of our activity includes:

  • Email address

The collection and processing of this data serves the following purpose(s):

  • Sending newsletters

Article 3.2: Method of data collection

Data is retained by the data controller under reasonable security conditions, for a duration of 12 months.

The company may retain certain personal data beyond the specified periods in order to fulfill its legal or regulatory obligations.

Article 3.3: Data hosting

The website www.twosixone.fr is hosted by:

Shopify International Ltd.
Attn: Data Protection Officer
c/o Intertrust Ireland
2nd Floor 1-2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

 

ARTICLE 4: DATA CONTROLLER AND DATA PROTECTION OFFICER

Article 4.1: Data controller

Personal data is collected by Studio 4810 Paris, SAS, registered under number Paris B 919 380 873.

The data controller can be contacted as follows:

By mail at: 61 Rue de Lyon, 75012 Paris
By email: hello@twosixone.fr.

Article 4.2: Data Protection Officer

The Data Protection Officer for the company or the data controller is: Anne-Emmanuelle Nettersheim, hello@twosixone.fr.

If, after contacting us, you believe your data protection rights ("Informatique et Libertés") are not being respected, you may file a complaint with CNIL (the French Data Protection Authority).

 

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user whose personal data is processed has the following rights, in accordance with European Regulation 2016/679 and the French Data Protection Act (Law 78-17 of January 6, 1978):

  • Right of access, rectification, and deletion of data (Articles 15, 16, and 17 of the GDPR);
  • Right to data portability (Article 20 of the GDPR);
  • Right to restriction (Article 18 of the GDPR) and to object to data processing (Article 21 of the GDPR);
  • Right not to be subject to a decision based solely on automated processing;
  • Right to determine the fate of data after death;
  • Right to file a complaint with the relevant supervisory authority (Article 77 of the GDPR).

To exercise your rights, please write to Studio 4810 Paris, 61 Rue de Lyon, 75012 Paris, or email hello@twosixone.fr.

In order for the data controller to comply with a request, the user may be required to provide certain information, such as their name, email address, and account or subscription number.

Visit cnil.fr for more information on your rights.

 

ARTICLE 6: CHANGES TO THE PRIVACY POLICY

The publisher of the website www.twosixone.fr reserves the right to modify this policy at any time to ensure its compliance with applicable law.

Any changes will not affect purchases made prior to the change, which remain subject to the policy in effect at the time of purchase and as accepted by the user during purchase validation.

Users are invited to review this policy whenever they use our services, without formal notice.

This policy was last updated on 01/11/2022.