Cart
Language
Privacy Policy
Welcome to our website www.deepnature.fr (hereinafter the " Site ") published by LABORATOIRES CINQ MONDES, domiciled at 6 square de l'Opéra-Louis Jouvet, 75009 Paris (hereinafter "we" or "our").
We are required to collect information about users of the Site, participants in and winners of competitions that we organise or that are organised by our partners, purchasers (professional or otherwise) of products that are sold on our Site, recipients of gift vouchers, and our suppliers and service providers (hereinafter "you"). Some of this information can be used to identify you (hereinafter "Personal Data").
We can assure you that the Personal Data we collect via the Site is processed in compliance with the provisions of the applicable Personal Data protection legislation.
As data controller and publisher of the Website, we are committed to providing you with clear and transparent information about how your Personal Data is collected, stored and processed. Please carefully read this Privacy Policy (hereinafter the "Policy"), which sits alongside the Terms and Conditions of Sale and the Terms and Conditions of Use of the Site.
In addition, we have appointed a Data Protection Officer (hereinafter the "DPO") to ensure that our processing is compliant and to liaise with the CNIL (the French data protection authority). You can contact the DPO at [email protected].
What is Personal Data?
It is important that you understand what Personal Data means. Personal Data is information that enables you to be identified directly or indirectly. It may be professional or personal. This data may include your surname, first name, postal address, email address and telephone number, as well as the IP address of your computer and information relating to your browsing on our Site.
How do we collect your Personal Data?
- We may indirectly collect your Personal Data in the following situations:
- When you receive a gift voucher, we collect your Personal Data through the person or company who gives you the gift voucher
- When you win a competition organised by one of our partners, we collect Personal Data through this partner
Why do we use your Personal Data and how long do we keep it?
To simplify the processing carried out, the table below sets out the reasons why we process your Personal Data (purposes), our reasons for processing it (legal bases) and the period during which we use it (retention period).
| Purposes | Legal Bases | Retention Period |
|---|---|---|
| When you use the Site | ||
| Management of your user account, if applicable | Contractual performance | Until you delete your account or, if you no longer use it, once it is considered inactive (after two years of inactivity), unless you object |
| Distribution of our newsletter | Your consent | Until you unsubscribe from the newsletter, or three years from your last contact with us |
| Management of our sales prospecting and loyalty-building operations | Until you withdraw your consent, or three years after your last contact with us | |
| Management of your contact requests | Our legitimate interest in responding to your requests and solicitations | The time required to respond to your request. We then archive your Personal Data for a period of two years to avoid any disputes |
| Management of the Site and your browsing on the Site through the use of cookies | Our legitimate interest in ensuring that the Site runs smoothly and your browsing experience flows well, and producing statistics and audience measurements | No more than six months |
| Delivery of personalised advertising based on your browsing profile | Your consent | No more than six months |
| When you enter a competition | ||
| Management and organisation of competitions | Contractual performance Our legitimate interest in contacting the winner of a competition to send them their prize |
Participants' Data is kept for the duration of the competition The Data of competition winners is kept for three months after the prize is sent |
| Management of our sales prospecting | Your consent | Until you withdraw your consent, or three years after your last contact with us |
| When you buy one of our products or book a treatment at one of our spas | ||
| Management of your order or reservation | Contractual and pre-contractual performance | Duration of the contractual relationship |
| After-sales service management | ||
| Management of our sales prospecting and loyalty-building operations | Our legitimate interest in providing you with information about products similar to those you have already purchased | Three years from your last contact with us |
| Carrying out satisfaction surveys | Our legitimate interest in improving our products and services | Time required to achieve the survey objective |
| Management of our accounting obligations | Legal obligation | Period in accordance with legal obligations or statutory time limits |
| Management of litigation | Our legitimate interest in providing evidence in the event of litigation | Statutory limitation period |
| When you receive a gift voucher | ||
| Management of your gift voucher and simplification of your appointment booking | Our legitimate interest in identifying recipients of gift vouchers | Until you use your gift voucher to book a treatment, or while the gift voucher is valid |
| When you have a treatment at one of our spas | ||
| Personalisation of your treatment | Your consent | Two years from the date of treatment |
| When you are one of our suppliers or service providers | ||
| Management of our commercial relations | Contractual performance | Duration of the contractual relationship, then archived for five years |
What Personal Data do we collect?
| Categories of Personal Data that may be collected | ||
|---|---|---|
| When you use the Site |
|
|
| When you enter a competition |
|
|
| When you buy one of our products, book a treatment and/or as part of our after-sales service |
|
|
| When you receive a gift voucher | First name and surname | |
| When you have a treatment at one of our spas | Surname, first name, health data, treatment preferences | |
| When you are one of our suppliers or service providers | Surname, first name, business contact details | |
Data relating to your payments made on the Site is collected directly by our payment service provider via a dedicated interface which you can access from our Site. Your payment data will be processed by our service provider in accordance with the strictest security and confidentiality rules applicable in the e-commerce sector.
Who are the recipients of your Personal Data?
Your Personal Data is shared within our various administrative and sales departments only with people authorised to process it because of their job roles.
It is also transmitted to our external service providers (such as our logistics service provider, our web service provider, etc.), acting in our name and on our behalf, only when they need this information to perform their services, in particular in order to provide you with the services offered on the Site. We ensure that the latter provide the necessary guarantees to keep your Personal Data secure and confidential.
We may also be legally required to pass your Personal Data to an administrative authority or an authorised public body (e.g., the tax authorities).
Is your Personal Data transferred outside the European Union?
As a matter of principle, we only process your Personal Data within the European Union.
However, we may transfer your Personal Data to external recipients who may be located in countries offering different levels of Personal Data protection. Where necessary, we undertake to ensure that appropriate safeguards are in place, such as signing the standard contractual clauses adopted by the European Commission, accompanied if necessary by additional measures to ensure their effectiveness.
You can request more information about the guarantees in place by emailing us at the address below.
What are your rights regarding your Personal Data?
In accordance with current regulations, you have the right to access, rectify or request the deletion of your Personal Data. You may also request that its processing be restricted, or object to processing.
In addition, you may withdraw your consent to commercial communications being sent by electronic means at any time.
In certain circumstances, you also have the right to the portability of your Personal Data. The right to portability allows you, where the processing of your Personal Data is based on your consent or on a contract and is carried out using automated processes, to ask us that your Personal Data be provided to you in a structured, commonly used and machine-readable format. Personal Data obtained in this way may then be passed on to another data controller without us standing in the way.
You also have the right to issue general or specific instructions about what should happen to your Personal Data after your death. Special instructions can be registered directly with us. General instructions can be registered with a trusted third party certified by the CNIL. You can change or delete these instructions at any time.
You can exercise your rights by contacting us at [email protected]
If you believe we are not respecting our obligations or your rights with regard to your Personal Data, you may file a complaint with the CNIL in accordance with the applicable regulations.
In the interests of confidentiality and to protect your Personal Data, we will need to identify you in order to respond to your request. If there are reasonable doubts about your identity, you may be asked to provide a copy of an identity document in support of your request.
Further information
We reserve the right to modify this Policy at any time, taking into account the Personal Data protection provisions in force.
If you would like further information about how we manage your Personal Data, you can send us your questions by emailing us at [email protected]
Policy last updated: 16/10/2023