PERSONAL DATA

We take your privacy very seriously and are committed to protecting it. We believe that you should be able to easily find out what personal data we collect and use, and understand your rights in relation to it.

This privacy policy (the "Privacy Policy") explains our policies and practices regarding how we collect, use and disclose personal data that we collect on our Digital Platforms or during our events.

We recommend that you read this Privacy Policy carefully as it contains important information about your personal data.

This Privacy Policy has been designed so that you can easily access the section of interest to you.

Please do not hesitate to contact us if you have any questions or comments about this Privacy Policy (see " We're here for you " below).

The terms " Altesse ", "we", "us" and "our" refer to Altesse Studio and Fournival Altesse SAS as those responsible for processing your personal data, unless otherwise specified in this Privacy Policy.

- Fournival Altesse SAS is a société par action simplifiée (simplified joint-stock company ) with capital of 550,000 euros, headquartered at 211 rue de l'abattoir, 60250 Mouy, France, and registered with the Beauvais Trade and Companies Registry under number 487 577 462 00012. 

Fournival Altesse SAS is part of the Chargeurs group.

Personal data is information relating to an identified or identifiable natural person. It includes, for example, a person's name, address and gender.

We may collect personal data directly from you (for example when you purchase one of our products in a store) or indirectly (for example from your electronic devices that interact with our websites, electronic forms or mobile applications.

We collect and use your personal data on one or more of the following legal bases:
- we have obtained your prior consent (e.g. when you subscribe to our newsletter). Please note that with this particular legal basis, you have the right to revoke your consent at any time (see below "What are your rights over your personal data? ");
- the processing is necessary as part of a contract between Altesse Studio and you (e.g. when you make a purchase);
- we have a legitimate interest in carrying out the processing and this legitimate interest is not overridden by your interests, fundamental rights or freedoms (e.g. the prevention of payment fraud);
- we need to process your personal data in order to comply with applicable laws and regulations.

Depending on the context, we may use your personal data to:
- provide you with the products or services you have requested;
- carry out checks to identify you and verify your identity;
- send you marketing communications, with your prior consent (see "Marketing communications" section);
- provide you with after-sales service and manage refunds;
- manage your refund requests;
- respond to your questions, suggestions and requests including your requests to exercise your rights;
- manage claims and disputes;
- manage events in which you have registered and/or participated;
- detect, prevent and combat any fraudulent or illegal activity, including to protect your transactions from payment fraud, act against counterfeiting and against the resale of our products in violation of our terms and conditions and/or our distribution network;
- to protect you, our employees and our property;
- to manage stock of certain types of rare products to enable a fair distribution of the products we sell;
- to monitor and improve our Digital Platforms;
- to carry out statistical analyses, in particular to adapt our product and service offering (including the use of nationality anonymously);
- to improve our products and services;
- to comply with our legal obligations, which includes providing information to regulatory bodies where required by law, in particular to comply with our legal obligations in relation to cosmetovigilance, the prevention of and fight against fraud, money laundering and the financing of terrorism.

With your prior express consent (usually obtained by ticking a particular box on a form), you may receive information about offers, services, products or events sent by Altesse Studio .

We rely on your consent to process the personal data you provide to us for this purpose. Consequently, if you no longer wish to receive such information, you may withdraw your consent at any time (see below " What are your rights regarding your personal data? ").

We may ask you to confirm or update your marketing preferences if you ask us to provide other products and/or services in the future, or if there are changes in law, regulation or our corporate structure.

Your personal data is processed for the period necessary for the purposes for which it was collected, to comply with legal and regulatory obligations and for the duration of any period necessary for the establishment, exercise or defense of legal claims.

In order to determine the most appropriate retention periods for your personal data, we have specifically taken into account the quantity, nature and sensitivity of your personal data, the reasons why we have collected your personal data, the service you deserve and expect from us, as well as applicable legal requirements. For example:

- With regard to our prospects (potential customers): your data is kept for three years from your last action, then deleted or archived in order to comply with legal retention obligations;

- With regard to our customers : your data is kept for the duration of our business relationship, up to ten years, then deleted or archived in order to comply with legal retention obligations;

- Cookies used on digital platforms are stored for up to 13 months from the time they are installed on your device.

We may disclose your personal data only to the parties designated below and for the following reasons: 

- We disclose your personal data toAltesse Studio employees who need access to your personal data and who are authorized to process it for the above-mentioned purposes and who undertake to keep it confidential. 

As part of the fight against payment fraud, your personal data is communicated to Altesse Studio in order to process your order and to combat attempted online payment fraud. As part of our legitimate interest in fighting payment fraud, Altesse Studio , as data controller, may transmit your financial data to an external service provider with a fraud detection tool in order to authenticate a payment. The said service provider is bound by an obligation of confidentiality.

- We may also communicate personal data to third parties acting on behalf ofAltesse Studio and approved by Altesse Studio . All such processing is based on our prior instructions set out in a binding contract that complies with the requirements of applicable law. Said disclosures are made for various purposes, including:
o IT development and support;
o Hosting and carrying out marketing and economic studies and marketing campaigns;
o Verifying your information, authenticating payments and processing orders and payments to third parties who provide credit reports, payment or order fulfillment services;
o Delivery services...

These service providers undertake to respect confidentiality and are not authorized to use your personal data for any other purpose. We also require them to apply appropriate security measures to protect your personal data. 

Some of these service providers are located outside your country, and more specifically outside the EU. We have taken steps to ensure that all personal data is adequately protected and that all transfers of personal data, including outside the EU, are carried out lawfully. Where we transfer personal data outside the EU to a country that is not designated by the European Commission as providing an adequate level of protection for personal data, transfers will be made under an agreement that covers the obligations imposed by the EU for the transfer of personal data outside the EU, including the standard contractual clauses approved by the European Commission, or under other appropriate safeguards.
To obtain a description of the appropriate safeguards, you can send us your request using the details in the " How to contact us " section below.

- We may be required by mandatory provisions of applicable law or in connection with legal proceedings or other legal requests, to disclose your personal data to authorities or third parties.

- We may also disclose or process your personal data in accordance with applicable law to defend our legitimate interests (for example, in connection with civil or criminal proceedings). For example, we may disclose your personal data if necessary to identify, contact or take legal action against a natural or legal person who breaches our General Terms and Conditions of Sale and Use, or who disturbs or harms other users of our Digital Platforms. 

- In the event of the acquisition by a third party ofAltesse studio, or of all or part of its assets, your personal data may be included in the assets transferred.

All your personal data is strictly confidential and will only be accessed on a need-to-know basis by duly authorizedAltesse Studio staff and independent service providers acting on our behalf within the framework of appropriate technical and organizational security measures.

Altesse Studio has implemented security measures to protect your personal data against unauthorized access and use. We follow appropriate security procedures in the storage and disclosure of your personal data to prevent unauthorized access by third parties and to prevent accidental loss of your data. We restrict access to your personal data to those people who really need to access it for business reasons. Persons accessing your data will be subject to a duty of confidentiality towardsAltesse Studio .

We also have procedures in place to deal with suspected data breaches. We will notify you and any relevant supervisory authority of any suspected data breach where we are required to do so by law.

We also require those to whom we transmit your personal data to comply with the above. Unfortunately, the transmission of information via the Internet is not completely secure. We therefore cannot guarantee the security of your personal data transmitted to us via the Internet. Any such transmission is at your own risk, and you acknowledge and agree that we shall not be liable for any unauthorized use, distribution, damage or destruction of your data, except to the extent that we are required by law to assume such liability. Once we have received your personal data, we will apply the aforementioned security measures.

In accordance with applicable data protection law, you may at any time request access, rectification, erasure and portability of your personal data, or restrict or object to its processing. A summary of these rights is set out below:

Your right of access: the right to receive a copy of your personal data.

Your right to rectification: the right to ask us to rectify any errors in your data or to add to it.

Your right to be forgotten: the right to ask us to delete your personal data, in certain situations.

Your right to restrict processing: the right to ask us to restrict the processing of your personal data, in certain circumstances, for example if you dispute the accuracy of the data.

Your right to data portability: the right to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format and/or to transmit this data to a third party, in certain situations.

Your right to object to processing: the right to object:
- at any time during the processing of your personal data for direct marketing purposes;
- in certain other situations, to our further processing of your personal data, for example processing carried out on the basis of our legitimate interests.

Where the processing of your personal data is based on your consent, you may decide to withdraw it at any time. If your consent is withdrawn, this will not affect the processing of your personal data based on other legal grounds, such as the fulfilment of your orders and the retention of your order data in accordance with applicable law. 

If you no longer wish to receive our advertising or promotional information, we remind you that you can revoke your consent to direct marketing at any time directly from the unsubscribe link included in every advertising e-mail we send you. If you do so, we will promptly update our databases and take all reasonable steps to respond to your request as quickly as possible, but we may continue to contact you to the extent necessary in connection with any product or service you have requested.

You also have the right to lodge a complaint with your local data protection authority in the event of an alleged breach of the data protection rules applicable to you. 

To exercise any of these rights, please contact us using the details below (see " We're here for you ").

Please note that if you exercise any of the above rights, you will be asked to let us know which right you wish to exercise and to provide us with certain information for identification purposes in order to process your request and protect you against fraudulent requests from third parties.

This Privacy Policy reflects our current practices and may be changed and updated from time to time. When we post changes to this Privacy Policy, we will change the "Effective Date" at the top of this Privacy Policy to indicate when such changes became effective.

If we change this Privacy Policy in a material way, we will notify you by posting a notice of change at the beginning of this Privacy Policy and on the home page of the " Altesse-Studio.com" website.