Privacy Policy
E-commerce site www.kaloo.com
Last updated : April 17th 2024
What is the purpose of this Privacy Policy?
The General Data Protection Regulation (GDPR) as well as the French Data Protection Act of 1978 (amended in 2018) requires professionals to provide concise, clear, understandable, user-friendly information about the processing of personal data pertaining to them, for the purpose of ensuring that they understand how their personal data are processed.
*Definition: The “Customer” - “you”: Any customer of the www.kaloo.com site as defined by Article 1 of the site’s general terms and conditions of sale.
--
Who is the data controller for the personal data collected and processed via the www.kaloo.com site?
--
JURATOYS
Simplified joint-stock company with share capital of €1,600,000,
located at 13 rue de l’Industrie – 39270 ORGELET, France
Registered with the Registry of Commerce and Companies of Lons de Saunier under number 453 389 660
--
What personal data concerning you do we collect?
JURATOYS is careful to only collect data that is strictly necessary for the purpose of the processing implemented.
Each time JURATOYS collects personal data, it will use an asterisk (*) to clearly indicate whether an answer is required or optional. If you do not complete the required fields, JURATOYS will not be able to proceed with processing. Any optional information helps us to better manage and improve processing.
In practical terms, the www.kaloo.com site collects the following categories of data concerning you:
First name, last name, salutation.
Email and mailing address, phone number.
Furthermore, some data are automatically collected by the www.kaloo.com site by cookies or other trackers, specifically:
Connection and navigation data
Date and time of visit, IP address, device, browser, operating system, system configuration data, pages viewed.
These data are required for the proper technical operation of the Site, as well as to measure site usage. For more information on cookies and other trackers, please review the Cookie Management Policy for www.kaloo.com.
For what purpose(s)/objective(s) are your personal data collected and on what basis? (Purposes of processing and legal basis)
Processing done by JURATOYS meets specific, explicit and legitimate purposes.
In practical terms, for the www.kaloo.com site, the purposes and legal bases are as follows:
If you create a customer account without making an order: Fulfilment of the contract.
If you create a customer account and make an order: Fulfilment of the contract and consent for data which are not strictly required for fulfilment of the sales contract.
Fulfilment of the contract.
JURATOYS has a legitimate interest in processing contact requests sent to it and providing you with information on its activities.
Consent.
Pre-contractual measures
Legitimate interest (CV-tech)
The legitimate interest of JURATOYS in improving its website, as well as enhancing your user experience.
The legitimate interest of JURATOYS to defend its rights.
Legal and regulatory obligations required of JURATOYS.
When your consent is the legal basis, it is important to note that you have the right to withdraw your consent at any time, specifically by contacting our Data Protection Officer (DPO)
Who are the recipients of personal data? (Recipients)
JURATOYS only communicates your personal data to specific, authorised personnel.
Data may be sent to providers of technical services selected for their expertise and reliability who operate on behalf of, and according to documented instructions from JURATOYS (IT subcontractors, etc.). These providers pledge to comply with the GDPR principles set forth in national and European Union legislation.
In practical terms, with respect to the www.kaloo.com site’s processing of data, the recipients of your personal data are as follows:
Internal recipients: personal data intended for employees of JURATOYS responsible for customer relationships.
Internal recipients: personal data intended for employees of JURATOYS responsible for customer relationships.
External recipients: data may be sent to providers of technical services selected for their expertise and reliability who operate on behalf of, and according to instructions from JURATOYS (in particular, regarding for the processing and delivery of orders, as well as managing Customer complaints/requests).
Internal recipients: personal data intended for employees of JURATOYS responsible for customer relationships.
External recipients: Data may be sent to providers of technical services selected for their expertise and reliability who operate on behalf of, and according to instructions from JURATOYS.
Internal recipients: personal data intended for employees of JURATOYS responsible for direct marketing.
External recipients: Our service provider for managing email campaigns.
Internal recipients: personal data intended for employees of JURATOYS responsible for recruitment.
Internal recipients: personal data intended for employees of JURATOYS responsible for IT and website management.
External Recipients: data may be sent to providers of technical services selected for their expertise and reliability who operate on behalf of, and according to instructions from JURATOYS (in particular, the IT maintenance provider).
Internal recipients: personal data intended for employees of JURATOYS responsible for legal affairs.
External recipients: administrative or legal authorities (Only in the scenario of an explicit request and with them having provided a reason or in the event of a proven violation of the legal or regulatory provisions) and/or external consultants (Only in the context of managing any disputes or other legal subjects, as the case may be).
Internal recipients: personal data intended for employees of JURATOYS responsible for legal affairs.
Internal recipients: external consultants
How long does JURATOYS store your personal data? (Period of time)
JURATOYS only stores your data for the period strictly necessary for the operations for which it was collected as well as to comply with legislation in effect.
In practical terms, with respect to the www.kaloo.com site’s processing of data, the storage periods are as follows:
If you create a customer account without making an order: The period in which your account is open (active basis).
If you create a customer account and make an order: The period in which your account is open (active basis). Then, for 5 years (archival basis) from deletion of your account as evidence in the event of litigation or pre-litigation.
The period of the contractual relationship (active basis). Then, for 5 years (archival basis) from the end of your contractual relationship as evidence in the event of litigation or pre-litigation.
The time period necessary to transmit the information requested (concerning the product and/or company) (active basis).
The period for which you have granted your consent (active basis, then for 3 years from the last contact (archival basis).
You can unsubscribe from the newsletter at any time, and thereby revoke your consent, by clicking on the unsubscribe link in each email.
If your application is not selected, your personal data is deleted immediately.
If we are interested in your application, our recruitment department will save your data for a maximum of six months (active basis), then for two years from your last contact with JURATOYS (archival basis).
This refers to data collected by cookies and other trackers - consult the table above concerning cookies.
These data are kept for 13 months.
The data are stored strictly for the time required for the improvement measures.
The data are stored strictly for the time required to manage the litigation.
Therefore, in general, the limitation for most actions is 5 years. They may be subject to specific limitations with shorter periods.
The data are stored in accordance with legal obligations.
Therefore, in general, accounting documents and supporting documents are stored for 10 years.
What are my rights with respect to my personal data? (Rights)
In accordance with the General Data Protection Regulation (GDPR) as well as the French Data Protection Act of 1978, you have the following rights with respect to your personal data:
“The exercise of your access rights allows you to know if data concerning you was processed and to obtain the communication in an understandable format. It also allows you to control the accuracy of the data and, if need be, to have it rectified or erased” (definition from the CNIL’s webpage).
“Does your personal data appear in an non-mandatory file and you would like it to no longer appear there? The right to object enables you to object to your data being used by an organisation for a specific purpose. You must propose “reasons related to your specific situation”, except in the case of direct marketing, to which you may object without justification.” (definition from the CNIL’s webpage / When this processing is based on JURATOYS legitimate interest.
JURATOYS will thereby cease processing it, unless there are legitimate and compelling grounds which prevail over your interests, rights and liberties, such as compliance with a legal obligation (such as those requiring conservation of documents) or even the establishment, exercise or defence of a legal claim.
The right to rectification allows you to correct inaccurate data about you (incorrect age or address) or to add to the existing data (address without an apartment number) in connection with the purpose of the processing” (definition from the CNIL’s webpage).
This right enables you to have the data controller erase personal data concerning you as quickly as possible. “You can have the data erased if at least one of the following situations applies:
- your data are used for marketing purposes;
- the data are not needed or no longer needed for the purposes for which they were initially collected or processed;
- you withdraw your consent to use your data;
- your data are subject to unlawful treatment (for example, by publication of pirated data);
- your data was collected when you were a minor in the information society environment (blog, forum, social network, website, etc.);
- your data must be erased to comply with a legal obligation;
- you object to the processing of your data and the controller of the file does not have legitimate or compelling grounds not to act upon your request.”
(definition from the CNIL’s webpage).
“If you dispute the accuracy of the data used by the organisation or you object to how the data are processed, the law authorises the organization to verify or review your request for a certain period of time. During this period, you can request the organisation to free use of your data. In practical terms, it should no longer use the data, but still store it” (definition from the CNIL’s webpage).
Thus the right to a temporary limitation of the processing of your data applies specifically for the purpose of conducting the verifications, namely:
- when you dispute the accuracy of your information, the time JURATOYS has to verify its accuracy;
- if the processing is unlawful, rather than request its erasure, you would prefer to limit its use
- if JURATOYS no longer needs the data for processing, but they still need to retain it so you can establish, exercise or defend a right in a legal claim.
- if you object to the processing pursuant to your right to object, during the verification period intended for verifying if JURATOYS’ legitimate reason prevails over yours.
“The right to portability provides the opportunity to retrieve some of your data in a machine-readable format. You are furthermore free to store this portable data or transmit it easily from one system to another, in order to reuse it for other purposes.” (definition from the CNIL’s webpage).
This right does not apply under all circumstances. It only applies subject to it fulfilling all of the following conditions:
- it applies only to your personal data, excluding all anonymous data and that of third parties;
- it does not apply to infringements of JURATOYS’ rights and liberties (in particular, business secrets) or that of third parties (specifically intellectual property rights);
- it concerns personal data processed automatically (therefore, paper files are not concerned);
- the processing is based on your consent or the fulfilment of a contract concluded with JURATOYS.
You may send general or specific instructions regarding your personal data in the event of your death (for example, that the data be deleted or sent to any person of your choice). You may revoke your directives at any time.
To learn more of the exact content of your rights, please review the aforementioned GDPR Articles or refer to the following link: "your rights to control your personal data".
How do I exercise my rights?
You can contact JURATOYS’ Data Protection Officer to exercise your rights:
- To the following email address: dpo@juratoys.com
- By mail to the following address:
Data protection officer
JURATOYS
13 rue de l’Industrie
39270 ORGELET
As an exception, the data protection officer could ask you to provide signed proof of identification if the officer has serious doubts as to the author of the request’s identity. This will be the case especially when the request was not sent directly from your kaloo.com customer account..
When you exercise your rights, the data protection officer processes your personal data in order to handle your request. These data are stored for one month (with the exception of the copy of your proof of identity (if requested), which is kept during the verification period) as JURATOYS has an obligation to reply within this time. Nevertheless, this deadline can be extended to 3 months in consideration of the complexity of the request.
--
Your right to file a complaint with the CNIL:
You also have the right to file any complaints with the French Data Protection Authority (la Commission Nationale de l'Informatique et des Libertés – CNIL), 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07, related to the way in which JURATOYS collects and processes your data.
--
How does JURATOYS ensure the security of your personal data?
JURATOYS takes all useful and suitable organizational and technical measures to preserve the security, integrity and confidentiality of your personal data, specifically to avoid it being altered or damaged or allowing unauthorised third parties access to it.
--
Who do I contact if I have a question or misunderstanding regarding this privacy policy?
All requests for information regarding the privacy policy implemented by JURATOYS can be sent to dpo@juratoys.com.
JURATOYS reserves the right to modify this policy at any time, in particular according to the legal and regulatory environment and CNIL doctrine.
Personal data: specific information charter
This specific information charter supplements the general charter on the processing of personal data.
The General Charter specifies JURATOYS' commitments in terms of data protection and informs you of your rights and the way in which you can exercise them.
JURATOYS reserves the right to modify this charter at any time, in particular depending on the legal and regulatory context and the doctrine of the CNIL.
Specific information charter relating to third-party content on Instagram:
JURATOYS is required to process personal data in the event that a natural person appearing on the content is identifiable (although not recognizable).
Promotion of our products.
Consent.
The personal data collected will be kept until consent is withdrawn and for a maximum of 5 years.
Internal recipients: the data is intended for employees in charge of our e-commerce sites and social networks.
External recipients: European subsidiaries of JURATOYS.