Aralia Studio

Version updated on 04/10/2024

Pursuant to Statute No. 78-17 of 6 January 1978 as amended and Regulation (EU) 2016/679 of 27 April 2016 on data protection (hereinafter the “GDPR”), Aralia informs any User who accesses the services offered on its website or in its physical stores about its commitment to comply with the confidentiality, integrity and security of the data that the User must provide in such environments.

All personal data that identifies the User directly (in particular, his/her surname, first name, postal, electronic or telephone data) or indirectly are considered confidential data and are treated as such, in accordance with the current legal framework relating to the classification of personal data (hereinafter, the “Personal Data”).

The words, terms and expressions hereinafter, when used in the singular or plural with an initial capital letter, shall have the meanings established in the General Conditions of Use (CGU) and/or the General Conditions of Sale (CGV), unless otherwise defined in this document.

ARTICLE 1. IDENTITY OF THE DATA CONTROLLER

The data controller collecting the User’s data on the Website and in the stores is Aralia, a sole proprietorship limited liability company (“société par actions simplifiée à associé unique”) duly incorporated under the laws of France, with a capital of EUR 75,000.00, whose registered office is located at [Company Address], registered with the Paris Trade and Companies Register under identification number [Identification Number] (hereinafter the “Company”).

ARTICLE 2. PERSONAL DATA THAT MAY BE COLLECTED

By browsing the website, visiting the stores and/or using the various services offered by Aralia, the User accepts that the Company may collect the following categories of data:

• Personal identification data: last name, first name, date of birth, postal address, email address, telephone number, nationality, language;
• Connection and navigation data:  IP address, password;
• Data related to an order: gender, size preferences;
• Website usage data: geographic connection area, day and time of access to the website, services consulted or used.

The User undertakes to provide updated and valid Personal Identification Data on the Website and guarantees that he/she will not make false statements or provide erroneous information.

ARTICLE 3. METHOD OF COLLECTION OF PERSONAL DATA

Users consent to the collection of their Personal Data by the Company by providing information during the following processes:

• Creating a user account;
• Subscription to the Company’s newsletter;
• Placing an order;
• Delivery process;
• Interaction through forms in physical stores;
• Reservation of products in stores;
• Subscription to product waiting lists;
• Creating a basket of products;
• Account creation through partners such as Facebook or Instagram.

ARTICLE 4. LEGAL BASIS FOR COLLECTION AND PROCESSING

Personal Data is collected on the following grounds:

• Specific, free and informed consent of the User (for example, for the creation of a user account or subscription to the newsletter);
• Compliance with a legal obligation by the Company;
• Execution of a contract between the Company and the User (for example, for compliance with the conditions of sale);
• Legitimate interest of the Company (for example, for transaction security).

ARTICLE 5. PURPOSES OF PROCESSING PERSONAL DATA

Personal Data is collected and processed for the following purposes:

• Creating user accounts;
• Subscription to the Company’s newsletter;
• Business relationship management;
• Commercial prospecting and sending of newsletters;
• Improving the services offered;
• Order management (confirmation, tracking, delivery);
• Access to user accounts;
• Online appointment requests;
• Contact via online forms.

With the User’s consent, Personal Data may be shared with Aralia’s business partners so that they can inform the User about their products and services.

ARTICLE 6. STORAGE PERIOD

The Company will retain Personal Data only for as long as necessary for the purposes mentioned above. In particular:

• Order-related data will be kept for five (5) years after the end of the business relationship.
• Data related to commercial prospecting will be kept for three (3) years after the end of the relationship.

In some cases, Personal Data may be retained for a period of up to ten (10) years in files with restricted access, to comply with legal obligations or to defend the rights of the Company.

AARTICLE 7. RECIPIENTS OF PERSONAL DATA

Personal Data will be accessible only to authorized personnel within Aralia, as well as to trusted subcontractors acting under precise instructions and ensuring appropriate security measures.

If data is transferred outside the European Union, the Company guarantees that such transfers will be carried out with the appropriate level of protection, in compliance with current regulations.

AARTICLE 8. SECURITY MEASURES

Aralia implements technical and organizational measures to ensure the security and confidentiality of Personal Data, protecting them from alteration, loss or unauthorized access.

AARTICLE 9. USER RIGHTS

The User has the right to access, rectify, delete and oppose the processing of his/her Personal Data, as well as to request the portability of the same. These rights can be exercised by means of a written request to the Company.

The User also has the right to withdraw his/her consent at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.