Thanks for visiting Gentaille's online store!
We understand how important data protection is and want to assure you that we take privacy issues seriously. This policy aims to give you clear and transparent information about how we handle your personal data, regarding how this data is collected and used when you visit www.gentaille.com (our website). This policy has been updated in accordance with GDPR (General Data Protection Regulation), which came into effect on May 25, 2018.
This website is operated by Chateau de Garage AB. The terms "we", "us" and "our" when used in this privacy policy refer to Chateau de Garage AB. The terms "you" and "your", when used in this privacy policy, refer to any user of this website.
Chateau de Garage AB
C/O
Brännevägen 4
433 38 Partille
Sweden
Organization number: 559496-8512
VAT registration number: SE559496851201
Chateau de Garage processes the following categories of personal data:
(A) Name
(B) Date of birth
(C) Home address
(D) Email address
(E) Phone number
(F) Payment information (credit card, invoice required information)
(G) Order and purchase history (products, date and time of purchase, returns)
Chateau de Garage AB processes your personal data for the following purposes:
(A) Providing our products
We use your name, date of birth, home address, email address, phone number, payment information and order history to administer and provide the products you purchase from our website in accordance with our terms and conditions. This processing of your personal data is based on our contractual obligations to you.
(B) Administration of returns and customer complaints
We use name, date of birth, home address, email address, phone number, payment information and order history to administer returns and customer complaints. This processing of your personal data is based on our legitimate interest in administering your return and refund.
(C) Fulfilling legal obligations
We use name, date of birth, home address, payment information and order history in accordance with the Accounting Act (1999:1078). This processing of your personal data is based on our legal obligations.
(D) Direct marketing
We use your name, email address and phone number to send you personalized information, offers and news through our newsletter or SMS.
(E) Defend and/or establish legal claims
We only use personal data that is relevant in each specific case to defend and/or establish legal claims. This processing of your personal data is based on our legitimate interest.
We collect your personal data directly from you when you make a purchase on our website and when you subscribe to our newsletter.
In order for you to make a purchase on our website, it is necessary that you provide your name, home address, email address, phone number and payment information. If you do not provide us with your personal data, we will not be able to fulfill our contractual obligations to you and you will therefore not be able to make a purchase through our website.
The personal data we collect from you is only processed within the European Economic Area (EEA).
To fulfill the purposes set out above, we will share your personal data with the following recipients:
(A) Payment solutions: Stripe.com
In order to be able to offer you Stripe's payment options, we will forward certain aspects of your personal information to Stripe, such as contact and order information, in order for Stripe to assess whether you qualify for their payment options and customize the payment options for you. General information about Stripe here. Your personal data is handled in accordance with applicable data protection legislation and in accordance with the information in Stripe's privacy policy.
(B) Shipping methods (DHL, UPS)
(C) IT suppliers (handling necessary operations, support, and maintenance)
(D) Logistics partner
Purpose:
To provide our products.
Type of personal data:
Name, home address, email address, phone number, payment information, order history.
Storage time:
For 3 years, or as long as you are an active customer.
–
Purpose:
Administration of orders, returns and/or claims.
Type of personal data:
Name, home address, email address, phone number, payment information, order history.
Storage time:
As long as it takes for us to handle your request and/or you are an active customer.
–
Purpose:
Fulfilling legal obligations.
Type of personal data:
Name, home address, payment information, order history.
Storage time:
For 7 years according to the Accounting Act (1999:1078).
–
Purpose:
Direct marketing.
Type of personal data:
Name and email address.
Storage time:
As long as you subscribe to our newsletter.
–
Purpose:
Defend and/or establish legal claims.
Type of personal data:
We only use personal data that is relevant in each specific case.
Storage time:
2 years after the latest correspondence if it is necessary to prevent, investigate and/or report possible fraud or other crimes.
You have several rights related to the personal data we process. We will always assess a request to exercise a right to determine if the request is valid. All rights listed below are not absolute, and exceptions may occur.
Right to erasure
You have the right to request that we erase your personal data without undue delay under the following circumstances:
the personal data collected is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
you withdraw your consent to a processing operation and there is no other legal basis for the processing;
you make a valid objection to the processing of your personal data;
the personal data has been processed unlawfully; or
the personal data must be deleted to fulfill a legal obligation.
Right of access
You have the right to request a copy of your personal data that we process and also receive supplementary information about our processing of your personal data.
Right to rectification
You have the right to have your personal data corrected and/or supplemented if it is incorrect and/or incomplete.
Right to data portability
Under certain circumstances, you have the right to receive the personal data concerning you that you have provided to us in order to transfer it to another service provider, if the processing of the personal data is based on your consent or the performance of a contract.
Limit processing
You have the right to request restriction of processing if:
The processing is illegal or no longer needed for the purposes stated above, but you object to deletion and request restriction instead;
The accuracy of the personal data is under review; and
you have objected to the processing of your personal data and such objection is under verification.
General objection
You have a general right to object to the processing of your personal data that is based on our legitimate interests. If you object, we must demonstrate that we have compelling legitimate reasons for such processing.
Objection to direct marketing
You have the right to object at any time to the processing of your personal data for direct marketing. If you do this, we can no longer process your personal data for these purposes.
In addition to the rights stated above, you always have the right to lodge a complaint with a supervisory authority regarding our processing of your personal data.
If you want to exercise the above rights, you are always welcome to contact us at customercare@gentaille.com.
Thank you and goodbye à tout! / Team Gentaille
