1.
Data controller
The person
who processes your personal data is Ambermind,
a French société à responsabilité limitée, with its registered office located 1 rue de
Stockholm, 75008 Paris, France, registered with the Paris Trade and Companies
Register under number 450 043 641(“Ambermind”)
2.
Purposes and
legal basis of the processing
Ambermind
collects some of your personal data for the following purposes:
Sale of
goods, sending newsletters, commercial prospecting.
Processing
carried out by Ambermind in the context of:
·
the sale of goods is based on Article 6.1 (b) of the
GDPR, according to which processing is lawful if it is necessary for the
performance of a contract to which the data subject is a party;
·
the sending of newsletters and commercial prospecting are
based on Article 6.1 (f) of the GDPR under which the processing is necessary
for the purposes of the legitimate interests pursued by Ambermind.
3.
Personal data collected and sources
3.1.
Personal data you provide to us
In the
context of the use of this website and your relationship with Ambermind, you may be required to communicate to Ambermind the following information concerning you:
·
Personal data relating to your identity, which may
include, but is not limited to: your surname, first
name, telephone number, email address, postal address, date and place of birth;
·
Personal data relating to your economic situation,
which may include: your payment details.
3.2.
Personal data that you provide to us in the context of exercising your
rights
When you
exercise your rights of access, rectification, limitation, portability or
erasure in accordance with Article 5 of this Privacy Policy, Ambermind will collect your email address, your last name,
first name and identity document so that Ambermind
can verify your identity and respond appropriately to your request.
4.
Recipients of your personal data
Ambermind
only communicates your personal data to recipients who are authorised and
determined to meet the purposes indicated above.
In
addition, in order to provide you with our services
and manage your data, we may use third parties, in particular
for hosting and sending newsletters, who act as data processors.
5. Exercising your rights
You have
the right to access personal data, to rectify or delete it, to limit
processing, to object to processing and to have your personal data ported.
Insofar as
the processing of your personal data is based on consent, you have the option
to withdraw your consent at any time, without this affecting the lawfulness of
the processing carried out prior to the withdrawal of your consent.
5.1. How to exercise your rights
You can
exercise these rights by sending an email to contact@minimacy.net, indicating
your first and last name. In accordance with Article 12.5 of the GDPR, Ambermind may refuse to act on your request if it is
manifestly unfounded or excessive.
In
accordance with Article 85 of the Data Protection Act, you can define
guidelines relating to the retention, deletion or communication of your
personal data after your death. If these are general directives concerning all of your personal data, they may be registered with a
trusted digital third party certified by the Commission Nationale de l'Informatique et de Libertés
(CNIL). In the case of specific directives concerning the personal data
collected by Ambermind, these are registered with the
latter. You can change or revoke your instructions at any time.
5.2.
Right to complain
You have
the option of filing a complaint with the Commission Nationale de l'Informatique et des Libertés
(CNIL), the supervisory authority responsible for the protection of personal
data.
6. How long we keep your personal data
6.1.
Personal data you provide to us
The
personal data that you provide to Ambermind are kept
only for the time necessary for their processing according to the purpose that
has been set.
In
particular, Ambermind keeps your
personal data for the following periods:
|
List
of the different treatments operated by Ambermind |
Retention period |
|
Newsletters and commercial prospecting |
retention
of personal data for a period of 3 years from the last contact with you. |
|
Sale of
goods, |
retention
of personal data for a period of 5 years from the last contact with you and
then for the applicable statute of limitations period. |
6.2.
Personal data that you provide to us in the context of
exercising your rights
When you
exercise your rights of access, rectification, limitation, portability or
erasure in accordance with Article 5
of this privacy policy, Ambermind keeps your surname,
first name, email address and identity document for a period of five (5) years
from your request in order to be able to prove within the legal limitation
periods that it has complied with its obligations.