Privacy Policy

To build a lasting relationship of trust with you, Simkha is committed to protecting your data.

The purpose of this Privacy Policy is to inform you about the practices of Simkha Biocosmétiques, which acts as a data controller (hereinafter the “Data Controller”) for all the processing of personal data mentioned above. -below.

1. Definitions

Order(s): refers to the purchase or subscription to one or more Product(s) or Service(s), made on the Site by the User.

Comment(s): refers to the testimonials or comments left by Users about the free content published on the Site.

Personal Data: refers to the personal data of Users as defined by the GDPR.

Product(s): refers to all or part of the products offered by the Site and accessible exclusively to Users.

GDPR: refers to Regulation No. 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Service(s): refers to all or part of the services offered by the Site and accessible exclusively to Users.

User(s): designates any adult person enjoying full legal capacity as well as any minor over the age of 16, subject to the prior agreement of the persons holding parental authority over them, using the Site and its Services.

2. Personal Data collected

The Data Controller collects your Personal Data directly from you, such as:

declarative data: when you communicate your Personal Data to it during your exchanges, in order to allow the contractualization of your purchase or for any spontaneous request on your part;
data generated by your activity: collected automatically as part of your browsing and use of the Site.

2.1 Declarative Personal Data

You are required to transmit Personal Data to the Data Controller, among other things, when you place an Order, when you subscribe to a list, or when you send a message via the contact form or when you leave a Comment on the Site.

2.2 Personal Data generated by the User’s activity

When using the Site, some of your Personal Data may be collected automatically such as the IP address of your computer or information relating to your computer, your means of connection.

Among the technologies used to collect this information, the Data Controller uses cookies in particular, in accordance with the Cookies Policy.

Legal bases and purposes of the processing of your Personal Data The Data Controller implements various processing operations whose legal bases are as follows: your consent, the performance of its contractual obligations, the performance of its legal and regulatory obligations and its legitimate interest.

The purposes associated with each legal basis are listed below:

Based on your consent:

Newsletter subscription management;
the management of requests for information and contacts from the persons concerned, in particular responses to messages via the contact form;
posting comments; and
the management of cookies subject to consent.

Based on execution of your contract:

the management of the contractual relationship, in particular the management and routing of orders
transmission of electronic publications
management of communications and follow-up of customer exchanges.

Based on compliance with legal and regulatory obligations:

the management of requests for the exercise of rights;
the management of procedures with the supervisory authorities, the judicial authorities or any other authorized authority; and
accounting management.

Based on the legitimate interests of the Data Controller:

the management of its pre-litigation and litigation;
information relating to significant changes to the Site or the information contained and in particular the evolution of the Site;
analysis of Site traffic;
improving the performance of the Site and the services offered by the Data Controller;
the management of cookies not subject to consent; and
the management of commercial prospecting operations for goods and services similar to those to which you have subscribed.

Recipients of the User’s Personal Data

The Data Controller is particularly concerned about respecting the confidentiality of your Personal Data and only communicates your Personal Data to recipients who are authorized and determined to meet the purposes indicated above, who are themselves subject to a strict confidentiality obligation.

Thus, the recipients of your Personal Data are, as the case may be, the following:

the authorized internal departments of the Data Controller, in particular those in the marketing, logistics, IT and administrative departments;
the Data Controller’s service providers and subcontractors (technical service providers, in particular those managing your payments, hosting the Site, administrative service providers, service providers authorized to manage customer service), subject to the same obligation of confidentiality; and or
compliance auditors.

Storage time

Your Personal Data is not kept beyond the time strictly necessary for the purposes pursued as set out above, in accordance with applicable data protection regulations. Personal Data is permanently deleted at the end of the retention periods.

Specifically, we organize our data retention policy as follows:

The data is kept until unsubscription The data is kept for three (3) years from the last contact.
The management of requests for information and contacts from Users, in particular responses to messages via the contact form: the data is kept for the time of the resolution of the request The data is kept for three (3) years from from the last contact.
The integration of Comments: the data is kept until the withdrawal of your consent. Otherwise, the data is kept for the duration of the existence of the Site The data is not kept beyond the duration of the existence of the Site
Management of the contractual relationship: the data is kept for the duration of the contractual relationship The only data necessary for pre-litigation or litigation purposes is kept until the acquisition of the legal prescription. The limitation period under common law in civil and commercial matters is five (5) years. In the event of litigation, these data are kept for the duration of the procedure and until the expiry of the ordinary and extraordinary remedies.
Management of requests to exercise rights: the data is kept for the time to grant the request: the data is kept for one (1) to six (6) years depending on the right exercised.
The management of procedures with the supervisory authorities, the judicial authorities or any other authorized authority: the data is kept for the duration of the exchanges with the said authorities The data is kept until the acquisition of the legal prescription.The limitation period of common law in civil and commercial matters is five (5) years. In the event of litigation, these data are kept for the duration of the procedure and until the expiry of the ordinary and extraordinary remedies.
Accounting management: the data is kept for the duration of the current financial year. The data is kept for ten (10) years from the end of the financial year
Management of litigation and pre-litigation: data is kept for the duration of the procedure Data is kept until the expiry of ordinary and extraordinary remedies
Information relating to significant changes to the Site or the information contained and in particular the evolution of the Site: the data is kept for the duration of the customer relationship The data is not kept beyond the customer relationship
Analysis of website traffic: the data is kept for thirteen (13) months. The data is not kept beyond thirteen (13) months
Improving the performance of the Sites and Services: the data is kept for thirteen (13) months.The data is not kept beyond thirteen (13) months

Security of your Personal Data

The Data Controller attaches particular importance to the security of your Personal Data.

Appropriate technical and organizational measures are implemented so that the data is processed in such a way as to guarantee their protection against accidental loss, destruction or damage which could compromise their confidentiality or integrity.

Transfers of your Personal Data

Your Personal Data is stored in Canada.

It is possible that Personal Data may be transferred to other countries when shared with potential subcontractors.

Cookies and other tracers

Among the technologies used to collect your information, the Data Controller uses cookies in particular.

Your rights over your Personal Data

You have a right of access to your Personal Data, as well as a right to rectify and erase your data when it is inaccurate, incomplete or obsolete, or when the collection, use, disclosure or storage is prohibited (unless they are necessary for the performance of the contractual and legal obligations of the Data Controller or for the defense of his rights).

You also have the right to obtain the limitation of the processing of your Personal Data when their accuracy is disputed, the processing is unlawful, the Personal Data is no longer necessary for the processing or when you have opposed the processing.

You have a right to the portability of your Personal Data and the right to define directives relating to the fate of your post-mortem data.

You have the right to oppose the processing of your Personal Data, at any time, for reasons relating to your particular situation, when the processing is based on the legitimate interest of the Data Controller. Treatment.

In the event of the exercise of such a right of opposition, the Data Controller will ensure that it no longer processes your personal data in the context of the processing concerned unless it demonstrates that it has legitimate and compelling reasons to maintain this processing. These reasons must be greater than your interests and your rights and freedoms or the processing must be justified for the recognition, exercise or defense of its rights in court.

You also have the right to oppose prospecting, in particular commercial prospecting, including profiling for this purpose.

When the processing of your Personal Data is based on your consent, you can withdraw it at any time, this withdrawal not making the processing carried out up to the time of this withdrawal illegal.

You also have the right to lodge a complaint with a supervisory authority, such as the CNIL.

You can exercise your rights by sending a message to the Electronic Mail Processing Manager at the following address: info@simkhabiocosmetiques.ca

Any request relating to the exercise of one of these rights must be subject to proof of the identity of the applicant by any means. In case of doubt about the identity of the applicant, he may be asked for additional information, which may go as far as providing an identity document.

Privacy Policy Update

The Data Controller may be required to modify the Privacy Policy, in particular according to the legal and regulatory context and the doctrine in the matter. Anyone concerned is advised to regularly consult this page to be aware of any changes or updates to this Privacy Policy.

Contact

For any question relating to this Privacy Policy or for any request relating to Personal Data, you can contact the Data Controller by sending him a message via the contact form available at the address: info@simkhabiocosmetiques.ca