Privacy policy

 

ARTICLE 1: PREAMBLE 

The purpose of this privacy policy is to inform users of the site: 

  • On how their personal data is collected. Personal data is any information that identifies a user. As such, it may be: his first and last names, his age, his postal or email address, his location or his IP address (non-exhaustive list);
  • On the rights they have regarding this data;
  • On the person responsible for processing the personal data collected and processed;
  • On the recipients of this personal data;
  • About the site's cookie policy.

This comprehensive policy legal notices and the General Terms of Use.

 

ARTICLE 2: PRINCIPLES RELATING TO THE COLLECTION AND PROCESSING OF PERSONAL DATA  

In accordance with article 5 of European Regulation 2016/679, personal data are:  

  • Processed in a lawful, fair and transparent manner with regard to the data subject;
  • Collected for specified purposes (see Article 3.1 hereof), explicit and legitimate, and not to be further processed in a manner incompatible with these purposes;
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  • Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that personal data which is inaccurate, having regard to the purposes for which it is processed, is erased or rectified without delay;
  • Kept in a form allowing the identification of the persons concerned for a period not exceeding that necessary with regard to the purposes for which they are processed;
  • Processed in such a way as to guarantee appropriate security of the data collected, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

Processing is only lawful if and insofar as at least one of the following conditions is met:

  • The data subject has consented to the processing of their personal data for one or more specific purposes;
  • The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the latter's request;
  • The processing is necessary for compliance with a legal obligation to which the controller is subject;
  • The processing is necessary to protect the vital interests of the data subject or of another natural person;
  • The processing is necessary for the performance of a task in the public interest or in the exercise of official authority vested in the controller;
  • Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the person concerned is a child.

 

ARTICLE 3: PERSONAL DATA COLLECTED AND PROCESSED IN THE FRAMEWORK OF BROWSING ON THE SITE 

 

Article 3.1: Data collected 

The personal data collected in the course of our business comes from:

  • Contact form
  • Newsletter form
  • email address
  • When you register as a user
  • When you place an order on the website

The collection and processing of this data meets the following purpose(s): 

  • Inform about news related to the store
  • Improve the technical aspects of the website (speed, usability, etc.)
  • Sending newsletters
  • Customer area management
  • Monitoring the quality of services
  • Order shipping
  • Cookies

These lists are not exhaustive.

The data collected is stored by the data controller under reasonable security conditions and for a reasonable period of time.

The company may retain certain personal data for longer periods in order to fulfill its legal or regulatory obligations.

Article 3.3: Hosting of data

The website nordlysfurniture.com is hosted by 1&1 IONOS, whose registered office is located at 7 Pl. de la Gare, 57200 Sarreguemines, with the telephone number: 09 70 808 911 and email: info@ionos.fr

Article 3.4: Cookie Policy

A cookie is a file that is downloaded to your computer when you visit certain web pages. Cookies allow websites to store and retrieve information about a user's browsing habits or their device. Depending on the information they contain and how the device is used, these cookies can be used to identify the user.

This webpage uses cookies for various purposes, including:

  • Analysis: Whether processed by us or by third parties, cookies help us to quantify the number of users. We use them to perform statistical measurements and analyses on how users interact with our services. This allows us to examine and improve navigation on our website.
  • Advertising: We also use cookies for ad serving. These cookies allow us to display personalized products and/or banners based on the web pages the user has recently visited, in order to offer content that may interest the user.


ARTICLE 4: DATA PROCESSOR AND DATA PROTECTION OFFICER 

Article 4.1: The data controller 

Personal data is collected by NORDLYS SAS, with a capital of 5000 euros, registered with the Marseille Trade and Companies Register under number 900604612, whose registered office is located at 70 rue Jean Mermoz, 13008 Marseille,

The personal data controller can be contacted as follows: 

By mail to the following address: 70, rue Jean Mermoz, 13008 Marseille, France

By email: Contact form

Article 4.2: The Data Protection Officer

The company's or data protection officer is: Anne-Sophie MUSSO

If you believe, after contacting us, that your “Computer and Freedom” rights are not respected, you can send information to the CNIL.

 

ARTICLE 5: USER RIGHTS REGARDING DATA COLLECTION AND PROCESSING

Any user concerned by the processing of his personal data may avail himself of the following rights, pursuant to European regulation 2016/679 and the Data Protection Act (Law 78-17 of January 6, 1978):  

  • Right of access, rectification and right to erasure of data (set out respectively in Articles 15, 16 and 17 of the GDPR);

  • Right to data portability (Article 20 of the GDPR);

  • Right to restriction (Article 18 GDPR) and to object to data processing (Article 21 GDPR);

  • Right not to be the subject of a decision based exclusively on an automated process;

  • Right to determine the fate of data after death;

  • Right to refer to the competent supervisory authority (Article 77 of the GDPR).

To exercise your rights, please send your letter to Nordlys or by email.

In order for the data controller to comply with his request, the user may be required to provide him with certain information such as: his first and last names, his e-mail address as well as his account number, personal space or subscriber. 

Visit the cnil.fr website for more information on your rights.

ARTICLE 6: CONDITIONS FOR MODIFICATION OF THE PRIVACY POLICY

The publisher of the website nordlysfurniture.com reserves the right to modify this Policy at any time in order to ensure that users of the site comply with applicable law.

Any changes cannot affect purchases previously made on the site, which remain subject to the Policy in force at the time of purchase and as accepted by the user when validating the purchase.  

The user is invited to read this Policy each time he uses our services, without it being necessary to notify him formally. 

This policy was edited on 24/06/2023.