Privacy Policy

THE POLICY

This privacy policy concerns the website maisonmyel.com (the “Site”) operated by Maison Myel SAS – 129 boulevard du Général Koenig – 92200 Neuilly-sur-Seine, France, acting as data controller (“we”), and governs the privacy of the data of users who choose to use it (“Users” or “you”). It explains how we process your personal data, in accordance with the regulations in force, in particular the GDPR (General Data Protection Regulation), French law no. 78-17 of 6 January 1978 on data processing, data files and individual liberties, known as the “Informatique et Libertés Law”, and Directive 2002/58/EC known as “ePrivacy”, transposed in particular into Article 82 of the Informatique et Libertés Law as regards trackers placed on your device.

This policy explains the sections of this website that may affect your privacy and your personal data, how we process, collect, manage and store this data, and how your rights under the GDPR and the Informatique et Libertés Law are respected.

This policy contains terms with specific meanings (for example recipient, personal data, data subject, processing, controller, processor). For a better understanding, please refer to their definition in Article 4 of the GDPR.

If you have any questions regarding this privacy policy or the processing of your personal data, you can send them to the address above or by email to info@maisonmyel.com.

1. FOR WHAT PURPOSES AND ON WHAT LEGAL BASES DO WE PROCESS PERSONAL DATA

We may collect and use users' personal data for the following purposes:

– To improve customer service:
the information you provide helps us respond more effectively to customer service requests and support needs (including our after-sales service).
This processing is based on the performance of our contract with you (when responding to your questions) or on our legitimate interest in improving our products/services.

– To personalise the user experience:
we may use aggregated information to understand how our users, as a group, use the services and resources provided on our website.
This processing is based on our legitimate interest in knowing our customers in order to improve our products/services or, where applicable, on your consent (for example, to the placing of cookies).

– To manage our website:
we may use the feedback you provide to improve our products and services.
This processing is based on our legitimate interest in knowing our customers in order to improve our products/services.
We may also analyse its traffic and optimise the user experience.
This processing is based on our legitimate interest in improving our website or, where applicable, on your consent.

– To process orders and payments:
we may use the information users provide about themselves when placing an order solely to provide the service relating to that order.
This processing is based on the performance of our contract with you.

– To manage your account and your wish list.
You may create an account on the website in order to facilitate your orders and manage your wish list. We may use your wish list to produce aggregated internal reports and thereby improve our products and services.
This processing is based on the performance of our contract with you (account management) and on our legitimate interest in improving our products/services (internal reporting).

– To enable you to share content on social media.
Our website may include sharing buttons that make it easy to distribute content directly from web pages to the relevant social media platforms. Use of these buttons is at your discretion and means that the shared content may be published on your social network profile or page.
This processing is based on your consent. In respect of this processing, we may act jointly with the social networks as controllers for certain activities (collection and transmission only).
You will find more information on how they process your personal data in their own privacy policies.
For example:

– Instagram

– Facebook

– X

– Pinterest

– TikTok

– To manage our accounts:
we must retain some of your personal data in order to fulfil our tax and accounting obligations.
This processing is based on a legal obligation to which we are subject.

– To handle any requests you may make to exercise your rights over your personal data:
as set out below, you have certain rights concerning your personal data. To exercise them, you will need to provide us with information that we will process.
This processing is based on a legal obligation to which we are subject.

– To display advertisements when you visit the websites of some of our commercial partners, such as social networks.
When you visit the websites of our commercial partners, we may ask them to display advertisements to you.
This processing is based on your consent.

– To send you periodic emails:
We may use your email address to send you information and updates concerning your order.
Your email address is also used to:

– respond to your enquiries, questions or other requests,

– send you newsletters containing exclusive information about exhibitions, events, works of art, our products/services and more.

We operate an email mailing list in order to inform our subscribers about the products, services and news we offer. Registration takes place online, through an automated process, after the user's explicit consent. Subscribers may unsubscribe at any time, from one or more mailing lists, through an automated online service or, failing that, by other means detailed at the bottom of marketing messages. The type and content of these messages, and the possible presence of third-party content, are clearly indicated at the time of registration.

Marketing emails may contain invisible pixels, tracked clickable links or similar server technologies enabling subscriber activity to be tracked. Where applicable, these messages may record various data relating to engagement, geolocation, demographics and data already recorded about subscribers.

This processing is based on your consent (for newsletters or promotional information if you are not yet a customer), on our contract with you (to send you information relating to your order) or on our legitimate interest in communicating with you (to respond to your various enquiries, questions and/or requests, or to send you promotional information if you are a customer).

– In order to implement our anti-money laundering policy.
To find out more about this policy, please follow this link. This processing is based on a legal obligation to which we are subject.

2. WHAT TYPE OF INFORMATION DO WE COLLECT?

We collect information:

1. Directly, through an action on your part. This is the case when:

– you place an order on the website,

– you create a wish list,

– you subscribe to our newsletter and other communications,

– you interact with us via our “contact” page.

In these cases, we inform you when the provision of your personal data is mandatory.

If you do not provide us with this “mandatory” information, we cannot guarantee that we will be able to respond to your request or enter into a contract with you.

2. Data we obtain through our relationship (for example, data relating to your orders).

3. Automatically, when you consent to us placing tracking tools (such as tracking pixels, hidden identifiers, tracking cookies) on your device.

3. SHARING YOUR PERSONAL INFORMATION

We do not sell, trade or rent users' personally identifiable information to third parties.

We may share aggregated and generic demographic information, not linked to personally identifiable information, concerning visitors and users with our commercial partners, our trusted affiliates and our advertisers for the purposes described above.

Generally speaking, we share your personal data with the following recipients:

– Internally: with the teams responsible for the processing operations mentioned above, in the course of their duties.

– With third-party service providers who help us run our business, fulfil our contractual obligations (in particular for the delivery of products or online payment) and operate the website, or who administer activities on our behalf, such as sending newsletters. We share your information with these third parties for those specific purposes.

– With other third parties where such disclosure is required by law, regulation or a court decision, or where such disclosure is reasonably necessary to comply with legal proceedings, respond to potential claims, or protect the security of your personal data or your/our rights.

Your personal data may be disclosed to certain recipients located, or hosting data, outside the European Economic Area (EEA).

Where your personal data is transferred to countries outside the European Economic Area that are not covered by an adequacy decision of the European Commission, we undertake to put appropriate safeguards in place (mainly by signing the European Commission's standard contractual clauses with the recipient) or to rely on a derogation provided for by the GDPR.

In all cases, you can obtain more information about the transfers outside the EU that may be carried out and obtain, on request, a copy of any safeguards put in place (see contact details above).

4. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Generally speaking, your personal data is kept for as long as necessary to achieve the purposes described in this privacy policy. The periods applied are as follows:

– Customer account and wish list: for the entire life of the account, then 3 years from your last activity (login, order or response to a solicitation). After that period, the account is deleted or anonymised.

– Orders, invoices and accounting records: 10 years from the close of the financial year, in accordance with Article L.123-22 of the French Commercial Code.

– Payment data: processed by our payment provider and not retained by us beyond the time necessary for the transaction; where applicable, data relating to a chargeback is kept for 13 months (15 months for deferred-debit cards).

– Commercial prospecting and newsletter: 3 years from your last contact, or until you unsubscribe if that occurs sooner.

– Requests sent through the contact form: for the time needed to handle the request, then 3 years as evidence.

– Trackers and audience measurement data: consent is kept for 6 months and trackers for a maximum of 13 months, in accordance with the recommendations of the CNIL. Details are set out in our cookie policy.

– Supporting documents collected for anti-money laundering purposes: 5 years from the end of the business relationship, in accordance with Article L.561-12 of the French Monetary and Financial Code.

– Exercise of your rights: any identity documents provided are deleted as soon as verification has been carried out; a record of the request is kept for 3 years.

Thereafter, data may be archived for as long as necessary to establish proof of a right or a contract, or for the legally prescribed period.

5. HOW TO EXERCISE YOUR RIGHTS

You may assert the following rights by contacting us at the postal or email address indicated above:

– Right of access to your data.
You may ask us at any time what personal data concerning you we process and how we process it, and access it or obtain a copy of it.

– Right to rectification.
You may ask us at any time to correct the personal data we process about you that is inaccurate or incomplete.

– Right to erasure (“right to be forgotten”).
In certain cases (for example, if you withdraw your consent, object to the processing of your data, or if it is no longer necessary for the purposes for which it was collected or processed), you may ask us to delete the personal data we process about you. We may, however, be unable to comply with your request (for example, if we are required to keep your data to comply with a legal obligation, or if we need to keep it for the establishment, exercise or defence of legal claims).

– Right to data portability.
Where we process your data on the basis of your consent or of your contract with us and that processing is carried out by automated means, you may ask us to send you a copy of it or to transmit it to a third party.

– Right to restriction of processing.
In certain cases (for example, if you contest the accuracy of your personal data, or if you have objected to its processing and we need to verify whether we must stop it), you may ask us to restrict the processing of your data, meaning that, apart from storage, it may only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for important reasons of public interest.

– Right to object to processing.
As regards processing based on our legitimate interest, you may ask us to stop processing your personal data, in particular for prospecting purposes. However, in certain cases (for example, where we are required to continue the processing for the establishment, exercise or defence of legal claims), we will be unable to comply with your request.

– Right to give instructions concerning the processing of your personal data after your death.
You may provide, amend or revoke specific instructions concerning the storage, deletion and disclosure of the personal data we process about you after your death.

You also have the right to withdraw your consent at any time. As regards processing based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before that withdrawal.

A copy of your identity document may be requested if there is any doubt as to your identity.

Finally, you may also lodge a complaint with the competent personal data protection authority (in France: www.cnil.fr).

6. CHANGES TO THIS PRIVACY POLICY

Maison Myel reserves the right to amend this privacy policy at any time. Where applicable, the date of the last update will appear at the top of this page. We encourage users to review this page regularly in order to be aware of any changes and to stay informed about how we protect the personal information we collect. You will, however, be notified of any significant change.