LE PETIT BLU – Privacy Notice

LE PETIT BLU privacy principles

We at LE PETIT BLU respect your rights to privacy and do everything necessary to protect your privacy. Personal data is collected only for specific purposes based on your consent and/or on a legitimate interest when you interact with us. You have the right to be informed about and to access your personal data at any time, you may request correction or deletion of your data stored with us.

We will not sell your personal data to anyone. However, if necessary and explicitly mentioned subsequently or if you have consented, then we can share your data with companies within our group, with licensees or other partners and other service providers, when – again – their own privacy notice may apply.

We assure you that we will take all necessary steps to protect your data from any misuse or data theft.

LE PETIT BLU Privacy notice

We appreciate your visit and thank you for using our websites, our on-line shops, digital applications and our social media pages (furthermore encompassed by the term the “sites”).

This Notice explains how and why we use the information, that is gathered about you through our sites or through the retail stores where our products are sold.

1. When does this privacy notice apply?

We at LE PETIT BLU respect your right to privacy when you use our sites or when you interact with us in our stores or at any other opportunity. By using our sites or by providing personal data, you accept the practices described in this privacy notice. If you do not agree to this Privacy Notice, we suggest you may stop using or visiting our sites or stop providing personal data.

We reserve the right to make changes to this Privacy Notice; please make sure you reread it on a regular basis. The changes will be factual when posted on this site; we will provide notice in form of an email of any material change.

2. How do you consent?

We will collect, use or disclose your personal information only when, where and if it is fair and lawful to do so. When reasonable, we will request your consent explicitly.

We will process your personal data for legal purposes, to perform a contract or based on other legitimate interest.

We will ask you for additional consent if your personal information is needed for purposes not described in this privacy notice. You never have to give such consent but if you decide not to, your access to some activities on our sites may be limited or impossible. You can of course revoke your consent at any time or re-give your consent.

3. How is data collected?

3.1 Personal data

This privacy notice applies to personal data that we collect from individuals or entities through a number of sources, like websites, on-line shops, mobile apps, social networks, or other consumer engagement services, or from third parties.

3.2 Types of personal data collected

LE PETIT BLU only collects personal data necessary for a specific purpose. We collect the following personal data information.

Personal data that you have shared with us

We collect personal data when you request information from us, when you purchase our products, or when you use an application of ours. You will be informed what kind of data is mandatory and what kind of data may be provided by you voluntarily. The types of personal data are:

1. Personal contact information such as name, email, address, phone numbers, pictures and demographic information, incl. age, gender, household or location

2. Account login information if you open an account with us or personal info about you when you fill out a survey, like names, email addresses, login ID, username, password and security questions

3.Payment information: name, credit card number, expiry date, billing address, when you purchase our products on-line or in a store

4. Content generated by yourself (if applicable), including any content, like photos, videos, graphics, personal stories

5. Employment information such as your CVs and references when you apply for a job with our organization

6. Your location, if you allow to share it in order to find a shop that sells our products nearest to you, e.g. data concerning the region you indicate.

Information collected automatically when using our sites

1. We use cookies and other tracking technology which collect information when you use our sites or apps, such as IP addresses, browser preferences, pages you have viewed, as well as information about your navigation experience, like visit times and clicks on our sites. You can read more in our Cookie Notice (when applicable).

2. We collect personal data information from third party social networking sites, like the “Like” functionality on Facebook, YouTube’s functionalities and applicable functionalities from other providers like Pinterest, Instagram, LinkedIn etc. through so called social plug-ins. The purpose of the data collection by LE PETIT BLU via plug-ins is necessary so you can share our content on your own social media pages.

3. Further processing and use of the data by these providers as well as the rights and setting options for the protection of your privacy can be found in the data protection references of these respective providers, and are not under our control. If you do not want LE PETIT BLU or the third party social networking site to access these informations collected through our sites and linked to your accounts with these social networks, you must please log out of all social networking sites before visiting our sites.

4. About children’s personal data

Our Sites are designed and designated to be used solely by adults. If and when a site by us is offering content to audiences of minor ages, we will get consent from a parent or guardian prior to collecting personal data, when we feel it is appropriate or when it is required by laws and regulations. If we detect that children’s personal data has been transmitted to us, it will be deleted from our database. Parents or legal guardians may contact us and request deletion of the data and/or de-registration. For this it may be necessary to send us a copy of an identification document, confirming the parental/guardian relationship.

5. Why do we collect personal data and how do we use it?

LE PETIT BLU collects and uses personal data for the following purposes; you can object to our processing of your data at any time:

1. to allow you to create and later access your user account. In doing so we process your data for the realization of a contract or request according to Art. 6 para. 1 lit. b GDPR.

2. to process and ship your orders and purchases your data is needed for the fulfillment of a contract or request according to Art. 6 para. 1 lit. b GDPR.

3. to develop consumer engagement and provide you a tailored consumer service, such as:

4. sending you information, products or samples that you have requested. In these cases: here, again we process your data based on your consent according to Art. 6 para. 1 lit. a GDPR.

5. Engaging with you in regards to our products and services by publishing your content for example. Here we also process the data based on your consent according to Art. 6 para. 1 lit. a GDPR.

6. to contact you in in regards to your queries, complaints or comments, via email, letter, or telephone. In these regards we process your personal data, including special types of personal data you provided with your prior consent, in order to process your specific request according to Art. 6 para. 1 lit. b GDPR.

7. to use it for promotional purposes you have consented to, or loyalty programs you are affiliated with, such as:

8. processing promotional events: data processing in order to perform a contract according to Art. 6 para. 1 lit. b GDPR.

9. Allowing you to participate in loyalty programs and interact with us within the program. In these cases we process the data based on your consent, where necessary, according to Art. 6 para. 1 lit. a GDPR and in order to execute the respective loyalty program according to Art. 6 para. 1 lit. b GDPR.

10. to contact you for marketing purposes, including direct marketing and social features within social networks: In the following cases you give your consent for the processing of such data according to Art. 6 para. 1 lit. a GDPR:

a.) to send you our newsletters, if you have subscribed to it.
b.) to suggest products or services.
c.) to offer you the opportunity to take part in promotions.
d.) to contact you via mobile message service if you have subscribed to it, if done via a partner, we will communicate its name to you.

11. to improve our sites and combine this info with information from third parties in order to better understand your needs and offer you with better service, including customizing sites and products for you and serving you interest-based advertising. In the following cases, we have legitimate interest to process the data according to Art. 6 para. 1 lit. f GDPR, if not otherwise indicated:

a.) evaluating the use of our sites, using data such as information about account login, computer usage, and/or previous website usage.
b.) to evaluate the use of our Sites with tracking-tools used based on user’s consent in accordance with Art. 6 para 1 lit. a GDPR or on our legitimate interest in accordance with Art. 6 para 1 lit. f GDPR. Find out more in our Cookie Notice.
c.) to improve our products and services using demographic information, consumer profiling and consumer feedback. In these cases, we process data based on your consent according to Art. 6 para. 1 lit. a GDPR,
d.) bettering the efficacy of ads and promotions, via cookies or tracking technologies based on your consent according to Art. 6 para. 1 lit. a GDPR or on our legitimate interest in accordance with Art. 6 para 1 lit. f GDPR.
e.) to personalize your website experience based on targeted ads. In these cases, we process data based on your consent according to Art. 6 para. 1 lit. a GDPR. Find out more in our Cookie Notice.

11. to offer you social features via community forums, tell-a-friend programa or social networking features such as Facebook Connect. In these cases, we process the data based on your consent according to Art. 6 para. 1 lit. a GDPR.

12. to process your job application for employment. In these cases, we process your data for the performance of a contract or request according to Art. 6 para. 1 lit. b GDPR or based on your consent (where required) according to Art. 6 para. 1 lit. a GDPR.

13. for internal governance, security and case management. In the following cases, we have legitimate interest to process the data according to Art. 6 para. 1 lit. f GDPR:

a.) to maintain the day-to-day operation, the maintenance and the security of LE PETIT BLU Sites.
b.) to conduct demographic studies or audits.
c.) to contact you for consumer research.
d.) to manage risks, disputes and records.
e.) to comply with legal and regulatory requirements. In these cases, we process your data for compliance with legal obligations to which we are subject according to Art. 6 para. 1 lit. c GDPR.

6. Why do we share personal information with other parties?

LE PETIT BLU does not share your personal information with any third party that intends to use it for direct marketing purposes, unless you have provided specific consent in relation to this.

We disclose your personal data to the following categories of recipients:

a.) our affiliates and any company of the LE PETIT BLU Group
b.) commercial partners, such as brand licensees or co-organizers of a promotion
c.) service providers to provide services on behalf of LE PETIT BLU
d.) authorities for legal reasons and potential buyers to carry a specific transaction.

Information about data recipients:

a.) Affiliates, group companies and brand licensees include:
b.) a company receiving a request and transferring this to another company which can legally respond.
c.) a company sharing a job application should it be addressed to another company.
d.) a company transferring an account opened on its company site to another company site if requested by you.

Commercial partners include:

a.) entities participating to a joint promotion or a loyalty program and wishing to send you information if you have consented to it. Both LE PETIT BLU and the partner might be joint controllers of your personal data. The privacy notice of such partner will apply to the processing of your personal information by the partner.

b.) at your request, and provided we are under no legal obligation to keep it, we shall delete or anonymize your personal data from the sites. You should note that your personal data could then still be available in the partner’s own databases if transmitted prior to us receiving your request.

Service providers include:

a.) advertising, media and marketing agencies delivering and analyzing our campaigns.
b.) postal and logistic companies delivering a product you have ordered.
c.) data processing entities acting upon instructions of LE PETIT BLU, such as recruitment agencies, hosting or security providers.
d.) web analytics tools providers.

Authorities include governmental or law enforcement authorities requesting us to disclose the information based on applicable law.

Potential buyers include entities to which LE PETIT BLU divest all or a part of its business or a brand, or in connection with a merger, change in control, or liquidation of that business or brand.

The subjects and entities indicated above will process the data in their quality as autonomous data controllers pursuant to applicable law or as data processors.

We require such third parties, possibly based outside the country from which you have accessed the sites, to comply with all relevant data protection laws and security requirements in relation to your personal data. These third parties are obliged to protect data privacy to the same extent as we do ourselves. If the level of data protection in a country does not comply with EU data protection laws, we will ensure that the protection of your personal data is the same as that in the European Union (EU) at all times.

Data processing in the USA

Various third-party service providers, like Google, Facebook, Pinterest, LinkedIn etc. have their residence in the USA. It needs to be underlined to users residing or based in the European Union (EU) or the European Economic Area (EEA) that US authorities generally allow the storage of all personal data relating to all persons whose data has been transferred from EU/EEA to the USA. This happens without differentiation, limitation or exception based on the aim pursued and without an objective criterion through which it were possible for European companies to limit access to the data by US authorities and possibly limit its use to specific and limited purposes which justify the intervention of access and use of this data. Also, there are no judicial remedies in place in the USA for affected persons from EU/EEA countries that would make it possible to receive access to the data relating to them and to have this corrected or deleted, as well as no effective legal protection against general access rights by US authorities. We remind the persons affected by this legal and factual situation that they can decide on whether or not to consent to their data being used, as we have no control over the data, when being used outside the EEA/EU.

For users residing in EEA and EU Member States particularly, please note that, from the point of view of the European Union, the USA does not have sufficient data protection levels due to the issues mentioned in this section. To the extent that we have explained in this Privacy Notice that recipients of data (such as Google, Facebook, Twitter, Pinterest, Instagram, LinkedIn and others) are located in the USA, we will enter into a contract with them to include appropriate measures, usually standard contractual clauses to protect and secure in accordance with applicable data privacy laws.

If we propose social plugins or if you connect your Account to your accounts on these third party platforms like Facebook or Google, we can collect and process account related information. If you connect with Facebook or Google, your Facebook/Google identity, name, email, location, friends list and profile picture will be stored and is used to connect with your Facebook/Google account to provide certain functionality on the Sites. The third-party platform’s use of information collected from you (or as authorized by you) is governed by its own privacy notice and your settings on the service. For further information please check the privacy notice of the respective social network.

7. How and for how long do we store and secure data?

LE PETIT BLU takes all necessary technical and organizational measures to protect the personal data we hold, against loss, unauthorized access or disclosure and against other misuse.

Personal data will never be sold, shared or otherwise disclosed or transferred to any other third parties except as provided in the Privacy Notice (see above).

We keep your personal data for as long as necessary for the given purpose, such as to send you our newsletter and other marketing communication, answer queries, resolve problems or provide improved and new services, or for legal requirements. We are allowed to retain the data for a reasonable time after you stop using our services. After a certain period, we will destroy or delete it in a secure manner, if there is no legal obligation to retain the information for a longer period.

In particular, we only keep personal information as long as needed:

a.) to carry out services that you requested or to which you have given your consent to the extent specified above;
b.) to use tracking advertising and analysis services within the scope of our legitimate interest.

In general the following duration periods apply:

a.) personal data of users’ account: until the user deletes his/her account for no longer than 3 months; after this period, LE PETIT BLU will store only those data necessary for fulfilling legal or fiscal obligations.

b.) personal data related to purchase orders: for the limitation period provided by applicable law.

c.) personal data of on-line job application: for as long as reasonably necessary for your employment application, taking into consideration our need to answer queries or resolve problems and to comply with legal requirements under applicable law. With your consent, we may keep it for a longer period, for example to be able to contact you should a suitable job opening occur in the future.

d.) personal data for marketing purposes: until the user withdraws his/her consent or opposes to the processing of his/her data for marketing purposes.

e.) personal data of users that participate in LE PETIT BLU’s contests: for the limitation period provided by applicable law.

f.) personal data of users requesting information, sending communication, complaint or enquiries to LE PETIT BLU: until the final processing of users’ request/complaint and subsequently retained by LE PETIT BLU where necessary for pursuing its legitimate interest (e.g. in case of complaints or enquiries for defence needs).

We use suitable technical and organizational security measures that are appropriate to protect your data stored by us from manipulation, partial or total loss and unauthorized access by third parties. Our security measures are continuously updated according to technological developments.

We also take the protection of our own internal company data very seriously. Our staff and all of our service providers are obligated to maintain confidentiality rules and to comply with all the European data protection regulations. Moreover, these are granted access to personal data only as far as is necessary.

8. Your Rights

You may object to the processing of your data at any time. You have the following rights:

1. Right to access: You have the right to demand an insight into your personal data saved with us any time and free of charge. You can check which of your personal data is being processed by us, and that we are using it according to the applicable data protection regulations.

2. Right to rectification: You have the right to have corrected incorrect or incomplete personal data and to be informed about the correction.

3. Right to deletion: You have the right to have your personal data deleted under certain circumstances.

4. Right to processing restriction: Under certain conditions, you have the right to demand restriction of the processing of your personal data.

5. Right to data portability: You have the right to receive your personal data that was provided to us by you free of charge in a machine readable format.

6. Right to file a complaint with the supervisory authority: You have the right to appeal to a competent supervisory authority against the method of the processing of your personal data.

7. Right of revocation: You have the right to revoke a consent at any time. Processing activities in the past based on your consent will not become illegal through your revocation.

You may exercise your rights by contacting us at contact@lepetitblu.com.

If you have an account with LE PETIT BLU, you can use the corresponding options directly in your account and change for example your opt-in/opt-out preferences.

9. How To Contact Us

„LE PETIT BLU c/o. Wille, 1300 Chemin du Grand Vallon, 06250 Mougins, France” is operating this website and the sites referred to in this Privacy Notice. LE PETIT BLU acts as a “data controller” for the personal data it processes in the framework of this Privacy Notice and the compliance of our data processing with applicable Data Protection Regulations, including the EU General Data Protection Regulation (GDPR).

Should you be concerned about a possible interference with your privacy or misuse of your personal data by us, or if you have any questions or comments, you can contact us via email at contact@lepetitblu.com or write to us using the address mentioned above.