Privacy policy

PRIVACY POLICY

1. DATA CONTROLLER

This Privacy Policy describes how personal data is collected and processed in connection with the use of the LUMIWEAR.FR website, available at:

https://www.lumiwear.fr/

The data controller is:

ASORIAX
A French SARL with share capital of EUR 10,000

33 Avenue Jean Jaurès
19360 Malemort
FRANCE

Brive Trade and Companies Register (RCS): 108 169 327
SIREN: 108 169 327
SIRET: 108 169 327 00013
Intra-Community VAT number: FR22 108169327

Telephone: 07 68 62 24 71
Email: lumiwear@asoriax.fr

ASORIAX places particular importance on the protection of personal data and undertakes to process such data in accordance with applicable regulations, including the General Data Protection Regulation (GDPR) and French data protection legislation.

2. SERVICE PROVIDERS AND DATA PROCESSORS

In connection with the operation of LUMIWEAR.FR and the fulfilment of orders, ASORIAX may use various technical or commercial service providers that may process certain personal data on behalf of ASORIAX or in connection with their own legal obligations.

These may include:

  • hosting providers;
  • payment service providers;
  • carriers and logistics providers;
  • email service providers;
  • IT maintenance and technical service providers;
  • business management or accounting solutions;
  • audience measurement and analytics tools, where used;
  • service providers involved in fraud prevention or website security.

These service providers only have access to the data necessary to perform their respective tasks.

Where they act as processors on behalf of ASORIAX, they are required to process personal data in accordance with ASORIAX's instructions and to implement appropriate measures to ensure the confidentiality and security of such data.

3. LEGAL BASES FOR PROCESSING

ASORIAX processes personal data only where there is a valid legal basis for doing so.

Depending on the processing activity concerned, processing may in particular be based on:

Performance of a contract or pre-contractual measures

Certain processing activities are necessary for the performance of an order or to take steps requested by the user before entering into a contract.

This includes, in particular:

  • creating and managing a customer account;
  • managing the shopping cart and order;
  • processing payments;
  • preparing the order;
  • personalising certain products where applicable;
  • arranging delivery;
  • managing after-sales service;
  • handling requests relating to an order.

Compliance with a legal obligation

Certain processing activities are necessary to enable ASORIAX to comply with its legal, tax, accounting or regulatory obligations.

This includes, in particular, invoicing and the retention of certain accounting documents.

Legitimate interests

Certain processing activities may be based on ASORIAX's legitimate interests, in particular to:

  • ensure website security;
  • prevent fraud;
  • improve the operation of the website and its services;
  • protect and defend ASORIAX's rights in the event of a dispute;
  • communicate with existing customers regarding similar products or services where permitted by applicable law.

Consent

Where required by applicable regulations, certain processing activities are based on the user's prior consent.

This may include, in particular:

  • certain direct marketing activities;
  • subscription to certain marketing communications;
  • certain audience measurement cookies or tracking technologies;
  • certain third-party services integrated into the website.

Where processing is based on consent, consent may be withdrawn at any time.

4. PERSONAL DATA COLLECTED

ASORIAX seeks to collect only personal data that is adequate, relevant and necessary for the purposes for which it is processed.

Depending on how the website is used, the following categories of data may in particular be collected:

Identification data

  • first name;
  • last name;
  • company name, where applicable.

Contact details

  • postal address;
  • delivery address;
  • billing address;
  • email address;
  • telephone number.

Customer account data

  • account identifier;
  • order history;
  • preferences and information saved in the account.

Passwords are intended to be stored securely and in a form that is not directly readable.

Order data

  • products ordered;
  • quantities;
  • prices;
  • any applicable discounts;
  • delivery method;
  • delivery address;
  • order history and status;
  • communications with customer service.

Personalisation data

Where the Customer orders a personalised product, ASORIAX may process the content supplied for the purpose of personalisation, including:

  • logos;
  • text;
  • photographs;
  • images;
  • illustrations;
  • graphic files;
  • designs;
  • specific instructions or specifications.

Such data is used only to the extent necessary to produce and fulfil the personalised order.

Payment data

ASORIAX may process certain information relating to the status and tracking of payments.

Banking information required for card payments is processed by the payment service providers used on the website.

ASORIAX does not intend to store the full payment card numbers used to make payments.

Technical data

Certain technical information may be collected when the website is used, including:

  • IP address;
  • browser type;
  • device type;
  • operating system;
  • technical logs;
  • browsing data;
  • information required to ensure website security.

Cookies and tracking technologies

Cookies or other tracking technologies may be stored on or read from the user's device.

Some are strictly necessary for the operation of the website, in particular for managing the shopping cart, user session or certain technical functions.

Other cookies or tracking technologies may require the user's prior consent.

For further information, users are invited to consult the Cookie Policy of LUMIWEAR.FR.

5. PURPOSES OF PROCESSING

Personal data may in particular be used for the following purposes:

  • creating and managing customer accounts;
  • managing orders;
  • processing payments;
  • preparing and personalising products;
  • managing dispatch and delivery;
  • invoicing;
  • managing after-sales service;
  • managing returns and refunds;
  • responding to customer service requests;
  • managing complaints and disputes;
  • complying with accounting, tax and legal obligations;
  • preventing and detecting fraud;
  • securing the website and transactions;
  • improving the operation and performance of the website;
  • audience measurement where implemented in accordance with applicable regulations;
  • marketing communications where permitted by applicable law or accepted by the user.

Where the user's consent is required, it may be withdrawn at any time.

6. RECIPIENTS OF PERSONAL DATA

Personal data is accessible to authorised persons within ASORIAX to the extent necessary for the performance of their duties.

Certain data may also be disclosed to service providers and partners necessary for the operation of the website and fulfilment of orders.

These may include:

  • payment service providers;
  • banking institutions involved in transactions;
  • carriers;
  • logistics providers;
  • hosting providers;
  • email service providers;
  • technical and maintenance providers;
  • accounting providers and management tools;
  • audience measurement providers where such services are used;
  • administrative, judicial or tax authorities where required by law.

These recipients only receive the data necessary to perform their respective tasks.

ASORIAX does not sell the personal data of its users or customers.

7. TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION

Some service providers used by ASORIAX may process or host data outside the European Union or the European Economic Area.

Where such transfers take place, ASORIAX seeks to ensure that they are carried out in accordance with applicable data protection regulations.

Depending on the circumstances, transfers may in particular be based on:

  • an adequacy decision adopted by the European Commission;
  • Standard Contractual Clauses approved by the European Commission;
  • any other mechanism recognised under applicable regulations.

8. DATA RETENTION PERIODS

ASORIAX does not retain all personal data for a single, systematic period of ten years.

Personal data is retained only for as long as necessary for the purposes for which it was collected and, where necessary, subsequently archived for the periods required or permitted by applicable regulations.

As a general rule:

  • data required to fulfil an order is retained for the period necessary to manage the commercial relationship and may subsequently be archived for the applicable statutory periods;
  • invoices and accounting documents are retained for the period required under applicable accounting and tax obligations;
  • prospect data is retained for a period proportionate to the purpose of marketing activities and in accordance with applicable rules;
  • data used for direct marketing purposes is deleted or made inactive when the user objects or withdraws consent where consent is the legal basis for processing;
  • data and files supplied for personalisation are retained for the period necessary for production, fulfilment of the order and after-sales service and, where additional retention is justified, for the period required by applicable legal obligations or legitimate interests;
  • data required for the management of a dispute may be retained for the period necessary to establish, exercise or defend legal claims;
  • cookies and other tracking technologies are retained for the periods provided for by applicable regulations and specified, where appropriate, in the Cookie Policy.

At the end of the applicable retention periods, data is deleted, anonymised or archived where continued retention is necessary to comply with a legal obligation or protect ASORIAX's rights.

9. DATA SUBJECT RIGHTS

In accordance with applicable regulations, data subjects may have the following rights.

9.1 Right of access

Users may request confirmation as to whether ASORIAX processes personal data concerning them and, where this is the case, obtain access to such data and the information required by applicable regulations.

9.2 Right to rectification

Users may request the correction of inaccurate personal data or the completion of incomplete data.

Where this functionality is available, certain information may also be changed directly through the customer account.

9.3 Right to erasure

Users may request the deletion of their personal data where the conditions provided for by applicable regulations are met.

This right is not absolute.

ASORIAX may be required to retain certain information, in particular to comply with a legal obligation, defend its rights or retain mandatory accounting records.

9.4 Right to restriction of processing

In the circumstances provided for by applicable regulations, users may request that the processing of their personal data be restricted.

9.5 Right to object

Users may object to certain processing activities based on ASORIAX's legitimate interests on grounds relating to their particular situation.

Users may also object at any time to the use of their personal data for direct marketing purposes.

9.6 Right to data portability

Where the conditions provided for by the GDPR are met, users may request to receive the personal data they have provided to ASORIAX in a structured, commonly used and machine-readable format.

They may also request that such data be transmitted to another data controller where technically feasible.

9.7 Withdrawal of consent

Where processing is based on consent, users may withdraw their consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9.8 Right to lodge a complaint with the CNIL

If users believe that the processing of their personal data does not comply with applicable regulations, they have the right to lodge a complaint with the competent French supervisory authority, the Commission Nationale de l'Informatique et des Libertés (CNIL).

10. EXERCISING YOUR RIGHTS

To exercise their rights or ask any questions regarding the processing of their personal data, users may contact ASORIAX:

By email: lumiwear@asoriax.fr

By post:

ASORIAX
33 Avenue Jean Jaurès
19360 Malemort
FRANCE

In order to protect personal data against fraudulent requests, ASORIAX may request additional information to verify the identity of the person making the request where this is necessary and proportionate.

A copy of an identity document is therefore not systematically required.

ASORIAX will respond to requests within the time limits laid down by applicable regulations, in principle within one month of receipt.

This period may be extended where permitted by applicable regulations, in particular due to the complexity or number of requests.

11. DATA SECURITY

ASORIAX implements appropriate technical and organisational measures designed to protect personal data against, in particular:

  • unauthorised access;
  • unauthorised disclosure;
  • alteration;
  • loss;
  • destruction;
  • fraudulent use.

Communications with the website use appropriate encryption mechanisms where necessary.

However, no computer system or transmission of data over the Internet can guarantee absolute security.

12. COOKIES

LUMIWEAR.FR uses cookies and similar technologies that are necessary for the operation of the website.

Certain tracking technologies may also be used for audience measurement purposes or to enable third-party services.

Where consent is required, these tracking technologies are only used after the user's consent has been obtained.

Users can accept, reject or change their preferences using the consent management tool available on the website.

Detailed information on the use of cookies is provided in the Cookie Policy of LUMIWEAR.FR.

13. CHANGES TO THIS PRIVACY POLICY

ASORIAX may amend this Privacy Policy, in particular to take account of:

  • changes to the website or its features;
  • the use of new service providers;
  • changes to personal data processing activities;
  • legislative or regulatory developments.

The applicable version is the version published on LUMIWEAR.FR.

Users are advised to review this page regularly to stay informed of any changes.

14. CONTACT

For any questions regarding this Privacy Policy or the processing of personal data:

ASORIAX
33 Avenue Jean Jaurès
19360 Malemort
FRANCE

Email: lumiwear@asoriax.fr
Telephone: 07 68 62 24 71