The purpose of this privacy protection charter is to inform you in a clear, simple and complete manner of the processing carried out on the personal data that you provide to us, or that we may collect through the various contacts that you may have with us (customer service, social networks, events), their possible transfer to third parties as well as your rights and options available to you to control your personal information and protect your privacy. In this Policy, you will find information about:
- Who we are ?
- What data we may collect about you?
- How do we collect or receive your data?
- For what purposes do we use your data?
- How long do we keep them?
- Who are the recipients of your data?
- How do we protect them and ensure their confidentiality?
- What are your rights under the European Regulations?
- How to contact us if you have questions about our use of your personal data?
- Managing cookies on the elhee.com website
Who are we ?
“Élhée”, “we”, “us” and “our” refer to:
Élhée, a simplified joint-stock company under French law whose registered office is located at 4 rue Clara Belle in Saint-Marcellin (38160), France, registered with the Grenoble Trade and Companies Register under number 842 142 028 and represented by Allison Piraud.
Élhée SAS is the data controller within the meaning of the regulations applicable to personal data and in particular EU Regulation 2016/679 relating to the protection of individuals with regard to the processing of personal data and to the free circulation of this data (hereinafter GDPR).
What data do we collect about you?
“Personal data” means any information that can identify you either directly (such as your name) or indirectly (for example using a unique customer number).
Depending on the data you provide to us or share with us, personal data may include information about:
Your identity and your contact data, your centers of interest, your purchases, your online journey (elhee.com, social network pages, partner websites) your requests via our customer service.
Regarding your purchases, your bank details do not pass unencrypted on Élhée's servers. Payments are made via a PCI-DSS certified secure payment platform, supplemented by control measures, in order to guarantee the security of purchases made and to combat fraud.
We invite you to keep us regularly informed in writing of any changes to your contact details.
How do we collect or receive your data?
As part of our relationship, we may collect certain data via the following contact points:
- course on elhee.com
- Elhée event in which you participate
- Contact with Customer Service
- Forms you fill out (in store or online)
- Élhée pages on social networks that you consult and comment / like
- Internet media advertisements you click on
- Search engine advertisements you click on
The personal data essential to Élhée are marked with an asterisk on each personal data collection form. If you do not complete these mandatory fields, we may not be able to respond to your requests and/or provide you with the services requested. Other information is optional and allows us to know you better and to improve our communications and services to you.
For what purposes is your data used by Élhée?
As part of our relationships, depending on the context in which your data is collected, we may use your data to:
- Managing your orders
- Management of personalized content and Élhée communications (digital or not)
- Managing your profile
- The management of your requests in connection with Élhée
- The management of events in which you register / participate
- The management of our website
- Improving our products and services
The legal basis for the processing of your data may be, depending on the context in which they are collected:
- Your consent. (e.g. for the purposes of managing our personalized commercial offers, managing your browsing via cookies)
- The performance of a contract. (e.g. managing your access to your customer account, processing
and track your orders)
- A legal obligation where the processing is required by law. (e.g. keeping purchase invoices)
- Our legitimate interest: to improve our products and services, prevent fraud, secure our tools or personalize our communications.
If you have any questions about how we process and use your personal data, or if you wish to exercise any of the above rights, please contact us by emailing firstname.lastname@example.org
How long can we keep them?
We keep your personal data only for the time necessary to achieve the objective pursued, to meet your needs, or to meet our legal obligations. In general, your personal data is stored in our database:
If you are a customer (i.e. if you have already purchased an Élhée product):
for a period not exceeding 10 years from your first purchase; this period will be renewed each time you interact with Elhée (for example a purchase)
If you are a prospect (i.e. if you have never purchased an Élhée product but you are interested in the Élhée brand): 3 years from the collection of your data; this period will be renewed each time you interact with Elhée (for example, participation in an event)
If cookies are placed on your computer, we keep them for a period not exceeding 13 months. When we no longer need your personal data, it is deleted from our systems and records or anonymized so that you can no longer be identified.
Who can access your data?
Your data is intended for the Élhée services concerned by your requests. We ensure that only duly authorized persons can access your personal data when necessary for the aforementioned purposes.
We do not give your data to third parties for commercial purposes.
We may also offer you the option of using your social media login data. Please be aware that in this case, you are sharing your profile information with us. The personal data shared depends on the configuration of the social network platform. Please note that these social networks apply their own privacy policies.
How do we protect and ensure the confidentiality of your data?
We take all necessary precautions to guarantee the confidentiality and security of your data and to prevent it from being distorted, damaged, destroyed or accessed by unauthorized third parties.
Please note that your data may be accessed, transferred or stored outside the European Union and be accessible there for staff who work for us or for one of our trusted service providers, for example access to your purchases from a store other than your primary store. We do this in a rigorously secure manner and in accordance with applicable law and take the necessary measures to ensure that third parties adhere to the commitments set out in this Policy, in particular by concluding appropriate contracts according to the model adopted by the European Commission.
Your rights under EU GDPR
It is important that you can control your personal data. Please find below a summary of the rights you have under the GDPR:
Right to information: you have the right to obtain clear, transparent and understandable information on how we use your personal data and on your rights. You will find all of this information in this policy.
Permission to access : you have the right to access the personal data that Élhée holds about you.
Right of rectification: you have the right to have your personal data rectified if it is inaccurate or outdated and/or completed if it is incomplete.
Right to erasure / right to be forgotten: you have the right to have your data erased or deleted. This right may however be limited by a legal reason or our legitimate interest in keeping your personal data.
Right of opposition to direct marketing: you can at any time ask to no longer receive our communications relating to our offers, news and events. In particular, you can use the hypertext link provided for this purpose in each email that we send you. You can also request to receive non-personalized communications about our products and services.
Right to withdraw consent at any time for data processing based on consent: you can withdraw your consent to our processing of your data where such processing is based on consent.
Right to data portability: you have the right to move, copy or transfer data from our database to another. This right only applies to data that you have provided, and provided that the processing is based on a contract or your consent and carried out using automated processes.
You also have the right to contact the data protection authority in your country to file a complaint against Élhée's data protection and privacy practices.
Please contact us as described below if you wish to exercise these rights or if you have any questions or complaints regarding the processing of your personal data. Please note that we may ask you for proof of your identity as well as the full details of your request before processing it.