PRIVACY POLICY

Privacy Policy

Version compliant with Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act (Loi Informatique et Libertés).

1. Data Controller

Nalamy
Publisher: Marine Philippo
Status: Individual entrepreneur — micro-enterprise regime
SIREN: 810 180 885
SIRET: 810 180 885 00024
Registered office: 25 rue de Ponthieu, 75008 Paris, France
Contact email address: contact.lirnova@gmail.com

Marine Philippo, operating under the brand name Nalamy, is responsible for the processing of personal data carried out in connection with the website nalamy.com.

2. Data Collected

Depending on your use of the site and the services requested, Nalamy may process the following categories of data:

  • Identity and contact details: surname, first name, postal address, email address, and phone number when provided.
  • Order-related data: products ordered, selected variations or colors, quantities, amounts, and order history.
  • Payment-related data: payments are processed by the payment providers used on the site. Nalamy does not store customers' full banking details.
  • Customer account data: when the Customer chooses to create an account.
  • Customer service data: content of requests and exchanges with Nalamy.
  • Navigation data: including IP address, device type, browser used, pages viewed, and certain information related to site usage, under the conditions specified by cookie and tracker management tools.

3. Purposes and Legal Bases

Personal data may be processed on the following legal bases:

Contract performance — Article 6.1.b of the GDPR
Management and processing of orders, payment, preparation, delivery, order tracking, after-sales service, returns, refunds, exercise of the right of withdrawal, and implementation of applicable guarantees.

Legal obligations — Article 6.1.c of the GDPR
Compliance with legal, accounting, tax, and applicable consumer protection obligations.

Consent — Article 6.1.a of the GDPR
Sending commercial communications when consent is required, as well as the deposit or use of non-essential cookies and trackers subject to consent.

Legitimate interest — Article 6.1.f of the GDPR
Site security, prevention of abuse and fraud, and improvement of services, subject to the fundamental rights and freedoms of the data subjects.

4. Data Recipients

Personal data is accessible to Nalamy and to service providers to whom certain data must be communicated to ensure the operation of the store and the execution of orders.

These may include:

  • the e-commerce and hosting platform used by Nalamy;
  • payment providers necessary for secure transaction processing;
  • providers responsible for preparing or shipping orders when necessary;
  • technical providers necessary for the operation and security of the site;
  • audience measurement, advertising, or marketing tools effectively used on the site, subject to applicable rules regarding consent to cookies and trackers.

Nalamy does not sell its customers' personal data to third parties.

5. Data Transfers Outside the European Economic Area

Some service providers used for the operation of the site may process data from countries located outside the European Economic Area.

When such transfers occur and particular protection is required, they must be framed in accordance with the GDPR, notably by an adequacy decision of the European Commission or by appropriate safeguards such as Standard Contractual Clauses.

6. Retention Periods

Data is retained for a period proportionate to the purpose for which it was collected and in accordance with applicable legal obligations.

By way of indication:

  • Order and transaction data: for the period necessary for the execution of the order and the commercial relationship, then archived for the periods imposed by applicable legal, accounting, and tax obligations.
  • Accounting documents: retained in accordance with applicable legal deadlines, which may extend up to 10 years.
  • Customer account data: for the duration of account use, then in accordance with the durations necessary for the management of the commercial relationship and legal obligations.
  • Data used for commercial prospecting purposes: for the duration authorized by applicable regulations.
  • Cookies and trackers: in accordance with the durations provided by regulations and the information communicated in the site's consent management tool.

7. Data Security

Nalamy implements appropriate technical and organizational measures to protect personal data against loss, alteration, disclosure, unauthorized access, or any other unlawful use.

These measures include, in particular, the use of secure HTTPS connections, the use of recognized service providers, and the limitation of access to data to individuals and providers who need it to perform their duties.

However, as no computer system can guarantee absolute security, the measures implemented are adapted to identified risks and available technologies.

8. Your Rights

In accordance with the GDPR and applicable French legislation, you may, depending on the circumstances, have the following rights:

  • right to access your personal data;
  • right to rectification of inaccurate or incomplete data;
  • right to erasure of your data under the conditions provided by regulations;
  • right to restriction of processing;
  • right to object to certain processing, particularly commercial prospecting;
  • right to data portability when legal conditions are met;
  • right to withdraw your consent at any time when processing is based on it.

You can exercise your rights by contacting Nalamy via the Contact page or at the address:

contact.lirnova@gmail.com

When necessary and in case of reasonable doubt regarding the identity of the applicant, additional information to confirm their identity may be requested.

You also have the right to lodge a complaint with the Commission nationale de l’informatique et des libertés (CNIL) if you believe that the processing of your personal data does not comply with applicable regulations.

9. Amendment of this Policy

This Privacy Policy may be amended to take into account legal, regulatory, technical, or operational developments of Nalamy.

The applicable version is the one published on the site at the time of consultation.