1. Purpose of the processing (purpose and legal basis)
Nibs Plus Ultra, whose registered office is located at 10 rue de Penthièvre, 75008 Paris, France, operates an online shop that enables its customers to order and pay for its products.
Personal data collected when orders are placed is recorded and processed in a customer database.
This data is used for the following purposes:
managing customer accounts, orders, payments, deliveries and returns;
managing and maintaining our commercial relationship with our customers;
preparing and retaining accounting records and, more generally, complying with our legal obligations;
carrying out customer loyalty and direct marketing activities;
sending, where your consent is required, marketing communications concerning products and services offered by Nibs Plus Ultra.
A. Legal bases for processing
Order management and contractual relationship
The processing of orders, payments, deliveries and returns is based on the performance of the contract entered into with the customer, in accordance with Article 6(1)(b) of the General Data Protection Regulation (GDPR).
Certain data may also be retained in order to comply with the legal obligations to which Nibs Plus Ultra is subject, particularly accounting and tax obligations, in accordance with Article 6(1)(c) of the GDPR.
Direct marketing concerning similar products
Where you are already a customer of Nibs Plus Ultra, your email address may be used to send you marketing communications concerning products similar to those you have previously purchased.
This processing is based on Nibs Plus Ultra’s legitimate interest, in accordance with Article 6(1)(f) of the GDPR, namely promoting its products and developing its commercial relationship with its customers.
You may object to the use of your data for this purpose at any time, easily and free of charge, in particular by using the unsubscribe link provided in each marketing communication.
Direct marketing concerning other products
Where marketing communications concern products or services that are not similar to those you have previously purchased, such communications may be sent by email only with your prior consent, in accordance with Article 6(1)(a) of the GDPR and Article L. 34-5 of the French Postal and Electronic Communications Code.
Your consent is freely given and may be withdrawn at any time, in particular by using the unsubscribe link provided in each marketing communication.
B. Categories of data collected
The data that may be collected and processed includes, in particular:
Identification and contact data
title;
first and last name;
billing and delivery address;
email address;
telephone number;
data required to manage objections to direct marketing.
Order-related data
order and transaction number;
details of products ordered;
purchase amounts;
information relating to the payment of invoices;
discounts granted, where applicable;
returns and refunds.
Payment method data
data required to process the payment, where such data is transmitted to the payment service provider;
bank card number and expiry date, where such information is required to process the transaction.
Nibs Plus Ultra does not retain the complete bank card details required for payment. Payment data is processed by the relevant payment service providers in accordance with their own security and data protection policies.
Data used for customer loyalty and direct marketing
purchase history;
information used to determine which products may be of interest to you;
information relating to your objection to, or consent to receive, marketing communications.
C. Recipients of the data
The data is intended for Nibs Plus Ultra and, where necessary for the fulfilment of orders or the provision of its services, its service providers and data processors.
Certain data may in particular be shared with:
online payment service providers;
service providers responsible for preparing and delivering orders;
technical service providers responsible for hosting, maintaining or operating the website;
service providers involved in sending marketing communications, where necessary.
Delivery service providers receive the data necessary to deliver orders, such as the recipient’s name, delivery address and telephone number where required for delivery.
Nibs Plus Ultra does not sell its customers’ personal data for commercial purposes.
D. Data retention periods
Data required for order management and invoicing
This data is retained for as long as necessary to manage the commercial relationship and, where required, is subsequently archived for the periods imposed by applicable legal obligations, particularly accounting and tax requirements.
Accounting records are retained for ten years, in accordance with applicable legal requirements.
Data used for customer loyalty and direct marketing
Customer data used for direct marketing purposes is retained for the duration of the commercial relationship and subsequently for three years from the date of the last purchase, in accordance with CNIL recommendations.
Payment method data
Nibs Plus Ultra does not retain the complete bank card details required for payment. The data necessary to process the transaction is handled by the relevant payment service provider.
Data relating to objections to direct marketing
Information necessary to record and respect an objection may be retained for a period appropriate to this purpose. CNIL recommends, in particular, retaining an entry on a direct marketing objection list for at least three years in order to ensure that the objection remains effective.
2. Your rights
In accordance with applicable data protection regulations, you have, subject to the conditions provided for by law, the right to access the personal data concerning you, the right to have it rectified, the right to have it erased, the right to restrict its processing and, where applicable, the right to data portability.
You also have the right to object to the processing of your personal data for direct marketing purposes.
Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.
If you no longer wish to receive marketing communications from Nibs Plus Ultra, you may unsubscribe at any time by using the unsubscribe link provided at the bottom of each marketing email we send you.
To exercise your rights or for any questions regarding the processing of your personal data, you can contact us at: contact@nibs-plus-ultra.com
You can also consult the information provided by the Commission nationale de l’informatique et des libertés (CNIL).
If, after contacting us, you believe that your rights have not been respected, you may lodge a complaint with the CNIL.
