Privacy policy
The purpose of this Privacy Policy is to inform you in a clear, simple and comprehensive manner about the processing of the personal data you provide to us, or that we may collect through the various contacts you may have with us (customer service, social networks, events), their possible transfer to third parties, as well as your rights and the options you have to control your personal information and protect your privacy. In this Policy, you will find information on :
- Who we are
- What data may we collect about you?
- How do we collect or receive your data?
- What do we use your data for?
- How long do we keep them?
- Who receives your data?
- How do we protect them and ensure their confidentiality?
- What are your rights under European regulations?
- How can you contact us if you have any questions about our use of your personal data?
- Cookie management on the elhee.com website
- Modification of this Privacy Policy.
Who we are
"Élhée", "we", "us" and "our" refer to:
The company Élhée, a French société par actions simplifiée (simplified joint-stock company) whose registered office is located at 4 rue Clara Belle in Saint-Marcellin (38160), France, registered with the Grenoble Trade and Companies Register under number 842 142 028 and represented by Allison Piraud.
Élhée SAS is the data controller within the meaning of the regulations applicable to personal data and in particular EU Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter RGPD).
What data do we collect about you?
Personal data" refers to any information that can be used to identify you, either directly (such as your name) or indirectly (for example, by means of a unique customer number).
Depending on the data you communicate to us or share with us, personal data may include information concerning:
Your identity and contact data, your interests, your purchases, your online experience (elhee.com, social networking pages, partner websites) your requests via our customer service.
Your bank details are not transmitted unencrypted on Élhée's servers. Payments are made via a PCI-DSS-certified secure payment platform, supplemented by control measures to guarantee the security of purchases and combat fraud.
Please keep us regularly informed in writing of any changes to your contact details.
How do we collect or receive your data?
In the course of our business relations, we may collect certain data via the following contact points:
- Visit elhee.com
- Élhée event in which you are participating
- Contact Customer Service
- Forms you fill in (in-store or online)
- Elhée pages on social networks that you consult and comment on / like
- Internet media advertisements you click on
- Search engine ads you click on
The personal data required by Élhée is indicated by an asterisk on each personal data collection form. If you do not fill in these mandatory fields, we may not be able to respond to your requests and/or provide you with the requested services. Other information is optional and enables us to get to know you better and improve our communications and services to you.
For what purposes is your data used by Élhée?
Depending on the context in which your data is collected, we may use your data to :
- Managing your orders
- Management of personalized content and Elhée communications (digital or otherwise)
- Managing your profile
- Managing your Élhée-related requests
- Management of events in which you register/participate
- Managing our website
- Improving our products and services
The legal basis for processing your data may be, depending on the context in which it is collected :
- Your consent. (e.g. to manage our personalized commercial offers, to manage your browsing via cookies)
- Contract performance. (e.g. managing your access to your customer account, processing
and tracking your orders) - A legal obligation when processing is required by law. (e.g. conservation of purchase invoices)
- Our legitimate interest: to improve our products and services, prevent fraud, secure our tools or personalize our communications.
Contact us
If you have any questions about how we process and use your personal data, or if you wish to exercise any of the above rights, please contact us by sending an e-mail to contact@elhee.com
How long can we keep them?
We keep your personal data only for as long as is necessary to achieve the intended purpose, to meet your needs, or to satisfy our legal obligations. In general, your personal data is stored in our database:
If you are a customer (i.e. if you have already purchased an Élhée product):
for a period not exceeding 10 years from your first purchase; this period will be renewed each time you interact with Élhée (e.g. a purchase)
If you are a prospect (i.e. if you have never purchased an Élhée product but are interested in the Élhée brand): 3 years from the date of collection of your data; this period will be renewed each time you interact with Élhée (e.g. participation in an event)
If cookies are placed on your computer, we store them for a maximum of 13 months. When we no longer need your personal data, it is deleted from our systems and records or rendered anonymous so that it can no longer be used to identify you.
Who can access your data?
Your data is intended for the Elhée departments concerned by your requests. We ensure that only duly authorized persons have access to your personal data when this is necessary for the above-mentioned purposes.
We do not give your data to third parties for commercial purposes.
You may also choose to disclose your personal data to our partners, advertisers and affiliates by following a link to and from their websites. Please note that these websites have their own privacy policies.
We may also offer you the option of using your social network login details. In this case, you share your profile information with us. The personal data shared depends on the configuration of the social network platform. Please note that these social networks have their own privacy policies.
How do we protect and ensure the confidentiality of your data?
We take every precaution to ensure the confidentiality and security of your data and to prevent it from being distorted, damaged, destroyed or accessed by unauthorized third parties.
Please note that your data may be accessed, transferred or stored outside the European Union, where it may be accessible to staff working for us or for one of our trusted service providers, for example accessing your purchase history from a store other than your main store. We do this in a rigorously secure manner and in accordance with applicable law, and take the necessary steps to ensure that third parties adhere to the commitments set out in this Policy, in particular by entering into suitable contracts in accordance with the model adopted by the European Commission.
When you create an account on elhee.com or apply for a job, you must enter a personal password. This is part of our confidentiality policy.
Your rights under the European RGDP regulation
It is important that you have control over your personal data. Please find below a summary of your rights under the GDPR:
Right to information: you have the right to obtain clear, transparent and comprehensible information on how we use your personal data and on your rights. You will find all this information in the present policy.
Right of access: you have the right to access the personal data that Élhée holds about you.
Right of rectification: you have the right to have your personal data rectified if they are inaccurate or obsolete and/or to have them completed if they are incomplete.
Right to erasure / right to be forgotten: you have the right to have your data erased or deleted. However, this right may be limited by a legal reason or our legitimate interest in keeping your personal data.
Right to object to direct marketing: you may at any time ask to be removed from our mailing list for offers, news and events. In particular, you can use the hypertext link provided for this purpose in every e-mail we send you. You can also ask to receive non-personalized communications about our products and services.
Right to withdraw consent at any time for data processing based on consent: you can withdraw your consent to our processing of your data where such processing is based on consent.
Right to data portability: you have the right to move, copy or transfer data from our database to another. This right applies only to data that you have provided, and provided that the processing is based on a contract or your consent and carried out using automated processes.
You also have the right to contact the data protection authority in your country to lodge a complaint against Élhée's data protection and privacy practices.
Please contact us as set out below if you wish to exercise these rights or if you have any questions or complaints regarding the processing of your personal data. Please note that we may ask for proof of identity and full details of your request before processing it.