Privacy policy - Chantelle
This policy is intended to inform you about our practices regarding the collection, processing, and sharing of the data you provide to us via our websites.
We consider your personal data to be confidential data to which we pay particular attention.
Personal data includes all data that can directly or indirectly identify you, including your name, phone number, email address, postal address, IP address, as well as any other data communicated directly by you, especially on our website or generated by your browsing.
In accordance with legal and regulatory obligations, we collect, use, share, and retain this information under enhanced security conditions and for limited durations, proportional to the purposes for which you communicated them to us.
Summary
- Data Collection
- Nature of data and purposes of data processing
- Transmission of personal data to third parties
- Transfer of personal data outside the European Union
- Rights of data subjects
- Our communications: "Will I receive advertising?"
- IT security
- Modification of the privacy policy
- Contact
- Cookie management
1. DATA COLLECTION
A. Data Collection
We collect the data you provide when you use our online services, particularly when you:
- Create a customer account on our website
- Place an order on our website
- Make a return request on our website;
- Browse and visit our site;
- Add products to your shopping cart;
- Proceed with payment;
- Subscribe to Chantelle newsletters;
- Contact our customer service;
- Participate in a game or contest;
- Fill out an information entry form, such as a satisfaction questionnaire or survey.
B. Mandatory or Optional Nature of Data
Furthermore, some information requested at the time of placing an order or contacting our customer service is mandatory and is indicated by an asterisk. Collecting it is essential for processing your request. Without it, we will not be able to respond.
C. Protection of Minors
It is possible that some minors may provide their contact information to us, particularly on our website, by subscribing to our newsletter. In this case, the legal representative can send us a request for deletion if they do not agree with this action.
2. NATURE OF DATA AND PURPOSES OF DATA PROCESSING
We use your personal data to achieve the purposes for which you transmitted them to us; their processing is based on the following legal grounds:
- The execution of pre-contractual and contractual measures;
- Your consent;
- The legitimate interest of the data controller;
- A legal obligation.
The table below presents the purposes for which we process your data, the data we may collect, the legal bases on which their processing is based, and the applicable retention durations.
To ensure you can make secure purchases on our international sites, we use ESW (eShopWorld), and its payment partners.
For each purpose pursued by the Processing of personal data:
- Chantelle can be an independent Data Controller, or
- ESW can be an independent data controller, or
- Chantelle and ESW Joint Controllers.
- Chantelle (RCS Créteil 562 053 694):
- ESW (n° 479237, Ireland)
Purposes for which Chantelle is Responsible for Processing
Management of customer relationship:
- To provide you with personalized offers, based on your consent on our services by Email / SMS or Postal Mail
Legal bases: Consent (SMS and email),
Legitimate interest of the data controller (postal way)
- Manage and respond to your requests to the customer service or via the Chatbot of the website
Legal basis: Legitimate interest of the Data Controller
Personal data : Name, First Name, Client Number, Email, Mobile Phone, Postal Address, Purchase History, Subject of the Request, Provided Response, Request History
Retention periods
- Customers: 6 years after your last interaction
- Prospects : 3 years after your last interaction
- Requests made to customer service : 3 years after the file is closed.
Purposes for which ESW is Data Controller
Payment management:
- Accept payment for online orders
- Establish billing and refund documents
- Fraud prevention and detection
Personal data : Payment information, Transaction details (including currency), First name, Last name, Email, Phone number, IP address
Delivery management:
- Manage delivery and logistics and customs operations
Personal data : First name, Last name, Email, Customer number, Order number, Invoice number, Mobile phone, Postal address.
Retention periods and legal bases determined by ESW.
Purposes for which Chantelle and ESW are joint controllers
Manage and process orders and returns:
- Order taking and tracking (status, order number)
- Manage order returns
Personal data : Name, First name, Customer number, Email, Mobile phone, Postal address.
Retention periods :
- Customers: 6 years after your last interaction
- Prospects : 3 years after your last interaction
- Requests made to customer service : 3 years after the case is closed.
Customer relationship management:
- Manage and respond to your requests to customer service when they are related to the online payment process.
Personal data : Name, First name, Customer number, Email, Mobile phone, Postal address, Purchase history, Subject of the request, Response provided, Request history, Payment information, Transaction details (including currency).
Retention periods : ESW determines the retention periods.
3. TRANSMISSION OF PERSONAL DATA TO THIRD PARTIES
Companies other than the Chantelle group or its subsidiaries or affiliated companies operating Chantelle-branded stores for which it acts are considered as third parties (hereinafter "Third Parties").
These Third Parties are:
A. MARKETING AND TECHNOLOGICAL PROVIDERS
Your personal data may be transmitted to external service providers who process them on our behalf, and/or according to our instructions. These providers may be considered as subcontractors or responsible for their own processing.
The transmission of your data is strictly controlled to ensure their security.
This particularly concerns third-party companies providing services and benefits: marketing; advertising, technological, IT, customer service support and this to offer you all necessary guarantees for your commercial operations.
B. ORDER MANAGEMENT, TRANSPORT AND DELIVERY PROVIDERS
ESW directly collects personal information about you to facilitate the order and handle its international shipment.If you wish to be delivered to a country supported by ESW, the latter handles:
- The payment experience
- The order shipment
- Return handling and its potentially associated refund
C. STATE AUTHORITIES
In order to comply with our legal, regulatory, judicial, or administrative obligations or to respond to requests from administrative and judicial authorities, we may be required to disclose your data to these authorities whenever we are legally obliged to do so.
4. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
ESW, for payment and shipping management, may use service providers located outside the European Union. In this context, ESW has ensured the conclusion of Standard Contractual Clauses with these subsequent providers.
In all cases, we take all necessary measures to ensure the security of your data and compliance with legal and regulatory obligations, notably through the signing of specific arrangements such as standard contractual clauses adopted by the European Commission. We will notably ensure that they are protected in the same way as if they were used within the European Union.
5. RIGHTS OF DATA SUBJECTS
You can exercise these rights through the channels described below:
A. Directly from your client area
If you have a client account on our site, you can check and update your information by accessing the services on the “ACCOUNT” page (https://chantelle.com/shop/en-ie?drawer=account). The information recorded in your account is stored until it is deleted.
B. By email or mail
You can exercise your right of access, portability, rectification, and deletion of your data under the conditions provided by legal and regulatory provisions by requesting it by mail to:
DPO of CHANTELLE Group,
Legal Department,8/10 rue de Provigny – 94230 Cachan,
or by email at: dpo_group@groupechantelle.com.
It is specified that you can also object, for legitimate reasons, to your personal data being processed or stored in our files.
In terms of commercial prospecting, you can exercise your right to object without having to justify a legitimate reason. If you have given us your consent to use your data, for example, to send you newsletters, you can withdraw your consent at any time.
If you reside in the European Economic Area and you consider that our response is not satisfactory, you can submit a complaint to the data protection authority of the country indicated in your billing address.
Attention: There may be a delay between your request and the actual termination of the sending of our offers, the time to take your decision into account in our IT tools.
6. OUR COMMUNICATIONS : “Will I receive advertising?”
A. By mail
When you have created an account online, you may receive a postal communication. We use the billing address you provided.
B. Email & SMS
When obtaining consent, you authorize us to send you personalized offers for each of these communication modes.
You have the possibility to withdraw or give your consent again:
- In the link at the bottom of our marketing communications and personalized offers by email
- By sending a “stop” message following an SMS communication.
All our SMS communications include a short number to send this information. Unsubscribing is done by sending a STOP message to the indicated number.
To unsubscribe from SMS communications, never reply directly to the message you received.
By withdrawing or giving your consent on your online account or during your next checkout.
Emails and SMS may still be sent to you as part of an online order (to send you your invoice, to give you your parcel number & to notify you of its shipment…).
C. By phone call
We do not conduct any commercial prospecting through this communication mode.
7. IT SECURITY
A. General Principle
We implement all appropriate technical and organizational measures to ensure the security, integrity, and confidentiality of your personal data and to prevent any possible destruction, loss, alteration, disclosure, intrusion or unauthorized access to this data, whether accidental or unlawful.
B. Security Breach Management
We have established a procedure for the prevention, management, remediation of security breaches and notification of personal data breaches, in accordance with legal and regulatory provisions. This procedure allows us to effectively address vulnerabilities and potential personal data breaches.
We commit to notifying cases of personal data breaches as soon as possible and, if possible, no later than 72 hours after becoming aware of them, to the CNIL if the breach in question is likely to pose a risk to your rights and freedoms.
We also commit to informing you promptly when this breach is likely to pose a high risk to your rights and freedoms. Additionally, we will communicate the measures taken to address the breach of your data, including measures to mitigate the consequences.
8. MODIFICATION OF THE PRIVACY POLICY
9. CONTACT
Furthermore, Chantelle Group has appointed a data protection officer. He can be reached at the following address: CHANTELLE, Legal Department, 8/10 rue de provigny – 94230 Cachan, and by email at the address : dpo_group@groupechantelle.com.
You can contact him for:
- Submit a complaint
- Inquiry regarding this Privacy Policy and confidentiality















