Confidentiality Policy

Welcome to our website www.cinqmondes.fr (hereinafter referred to as the "Site") published by LABORATOIRES CINQ MONDES, domiciled to 6 square de l’Opéra-Louis Jouvet, 75009 Paris (FR) (hereinafter referred to as "we" or "us") 

We are required to collect information concerning users of the Website, participants in competitions that we organize, buyers (professional or not) of products sold on the Website, and also our suppliers and service providers (hereinafter referred to as "you"). Some of this information allows us to identify you (hereinafter referred to as "Personal Data").

We can assure you that the Personal Data that we collect via the Website is processed in compliance with the provisions set out by the applicable legislation regarding Personal Data protection.

As data controller and publisher of the Website, we want to inform you in a clear and transparent manner of the way in which your Personal Data is collected, stored and processed. In this line, please carefully read this Confidentiality Policy (hereinafter referred to as the "Policy"), which supplements 

Personal Data: What is it?

When you create an account: Your first name and surname, title, email address, postal address, date of birth, phone number, username and password.

So that you can fully understand, it's important that you know what the notion of Personal Data covers. Personal Data is information that allows us to identify you, whether this is directly or indirectly, and whether this data is professional or personal. In particular, it may be your first name, surname, postal address, email address, phone number or your computer's IP address, and any information connected to your browsing on our Website.

Why do we use your Personal Data and for how long?

In order to simplify the presentation of the specifications of the processing implemented, in the table below, you'll find the reasons why we process your Personal Data (purposes), our justifications for the processing (legal bases) and the period for which we use it (retention period).

Purposes	Legal bases	Retention period
When you're using the Website
Managing your user account, if applicable	Contractual execution	Until you delete your account, or if you no longer use it, once it's considered to be inactive (after two years of inactivity), unless you appeal this
Distribution of our newsletter	Your consent	Until you unsubscribe from the newsletter, or 3 years from your last contact with us
Managing our commercial prospecting and loyalty campaigns		Until you withdraw your consent, or 3 years from your last contact with us
Managing your contact requests	Our legitimate interest in responding to your requests and questions	Period necessary to respond to your request. We then archive your Personal Data for a period of 2 years in order to prevent any disputes
Managing the Website and your browsing on the Website through the use of cookies	Our legitimate interest in ensuring the smooth running of the Website, the fluidity of your browsing and the generation of statistics and audience measures	Period of up to 6 months
Distribution of customized advertising according to your browsing profile	Your consent	Period of up to 6 months
When you take part in a competition
Managing and organizing competitions	Contractual execution	Term of competition
Managing our commercial prospecting	Your consent	Until you withdraw your consent, or 3 years from your last contact with us
When you buy one of our products
Managing your order	Contractual execution	Term of the contractual relations
Managing product support
Managing our commercial prospecting and loyalty campaigns	Our legitimate interest in communicating information to you on products similar to those that you've already bought	3 years from your last contact with us
Completion of satisfaction surveys	Our legitimate interest in improving our products and services	Period necessary for the completion of the survey objective
Managing signatures of professional clients for training	Contractual execution	For a period of 3 years after training
Managing our accounting obligations	Legal obligation	Period compliant with the legal obligations or terms required by law
Managing disputes	Our legitimate interest in constituting evidence in the event of a dispute	Period required by law
When you're a service provider or supplier
Managing our commercial relations	Contractual execution	Term of the contractual relations
Managing our service provider/supplier record	Our legitimate interest in communicating information regarding your activity to you	3 years from your last contact with us
Managing our accounting obligations	Legal obligation	Period compliant with the legal obligations or terms required by law
Managing disputes	Our legitimate interest in constituting evidence in the event of a dispute	Period required by law

• What Personal Data do we collect?

Categories of Personal Data which may be collected
When you use the Website	When you create an account: Your first name and surname, title, email address, postal address, date of birth, phone number, username and password. When you browse on the Website: Browsing data collected by cookies (e.g. IP address) and localization data if you're using the Google Maps service integrated into the Website. When you contact us: Your first name and surname, email address, postal address, phone number, professional category, any personal data that you communicate in your messages. When you subscribe to the newsletter: Your consent to receiving our newsletter.
When you take part in a competition	When you sign up to a competition: Your first name and surname, date of birth and email address.
When you buy one of our products and/or as part of our product support service	When you're not a professional client: Your first name and surname, title, email address, client ID, postal address, date of birth, phone number, invoices, order history. When you are a professional client: Your first name and surname, title, professional email address, client ID, your company's postal address, company name, professional phone number, invoices, order history.
When you're a service provider or supplier	Your first name and surname, title, professional email address, your company's postal address, company name, professional phone number, signature.

Data regarding payments that you have made on the Website are directly collected by our payment service provider via a dedicated interface which you can access on our Website. Data regarding your payments will be processed by our service provider in compliance with the strictest safety and confidentiality rules applicable in the electronic commerce sector.

How do we use cookies?

We use cookies and other tracers on the Website. To find out more about how we use these tools, please read our 

Who receives your Personal Data?

Your Personal Data is sent within our various administrative and commercial departments, only to individuals authorized by their positions, for processing.

It is also sent to our external service providers (such as our logistics service provider, our web service provider, etc.), acting on our behalf and in our name, only when they need this information as part of the fulfillment of their service, particularly in the aim of providing you with the services offered on the Website. We ensure that these service providers present the necessary guarantees in compliance with the security and confidentiality of your Personal Data.

We may also be required, pursuant to a legal obligation, to send your Personal Data to an administrative authority or to an authorized public organization (e.g. tax administration).

Is your Personal Data transferred outside of the European Union?

By principle, we only process your Personal Data within the territory of the European Union. 

However, we may be required to transfer your Personal Data to external recipients which may be based in countries offering different levels of Personal Data protection. If applicable, we're committed to ensuring that the appropriate guarantees are put in place, such as the signing of master contractual clauses adopted by the European Commission, accompanied by additional measures to ensure their efficacy, if necessary.

You can ask for more information on the guarantees put in place by sending us an email to the address indicated below. 

What rights do you have regarding your Personal Data?

In compliance with the applicable regulations, you have the right to access, rectify or request the deletion of your Personal Data. You can also request the limitation of its processing or appeal it.

Furthermore, you can withdraw your consent to the electronic sending of commercial communications at any time.

In certain circumstances, you also have the right of portability for your Personal Data. The right of portability enables you, when your Personal Data's processing is based on your consent or on a contract and when it is carried out using automated processes, to obtain from us the provision of your Personal Data in a structured format, commonly used and machine-readable. The Personal Data hence obtained can then be sent to another data controller without us obstructing this process.

You also have the right to define directives, general or special, relating to the date of your Personal Data following your death. Special directives may be registered directly with us. General directives may be registered with a trusted third party that has been certified by the CNIL [French Data Protection Authority]. You have the option to modify or delete these directives at any time.

You can exercise your rights by contacting us at the following email address: [email protected]

In the scenario whereby you believe that we are not complying with our obligations or your rights regarding your Personal Data, you can submit a complaint to the CNIL [French Data Protection Authority], in compliance with the applicable regulations.

In order to maintain the confidentiality and protection of your Personal Data, we will need to identify you in order to respond to your request. For this, should we have any reasonable doubts regarding your identity, you may be asked to attach a copy of your ID to your request.

Additional information

We reserve the right to amend this Policy at any time, taking into account the applicable provisions regarding Personal Data protection.

If you want to get further information on how we manage your Personal Data, you can send us your questions by email to the following address: [email protected]

Date of latest update to the Policy: 12/01/2023.