Privacy policy

1. Data Controller

The Controller for Personal Data is:

Shop Makers
A simplified joint-stock company with capital of €10,000
5 Avenue Ingres, 75016 Paris
Paris Trade Register number 840 776 298

2. Your Personal Data’s security

We take all necessary precautions to keep Information secure. We make efforts to ensure it is not shared with unauthorised people and those working for us are obliged to keep your Personal Data confidential.

Personal Data we collect is stored in a secure environment. To keep it secure, we use the following measures:

• SSL (Secure Sockets Layer) protocol
• Access management - authorised people only
• Back-ups
• Username/password
• Firewall

We undertake to maintain a high level of confidentiality by using the latest technologies to safeguard the privacy of your subscriptions. However, because no mechanism is completely secure, there is always some risk when you use the internet.

3. Processing of your Personal Data when you take out a subscription

3.1. Type of Personal Data processed

When you subscribe to our Services as described in our General Terms of Sale and you use these Services, we may process the following Personal Data:

• Identification and contact data: title, first name, surname, username, voice recording, email address, postal address, telephone number
• Lifestyle habits: data about partner sites visited, proof of purchases from partner sites and details of the subscription to Shop Makers
• Financial information: Data about the payment card used, IBAN, transaction number; any information about fraudulent payments, payment methods, receipts, balances and debts, refunds
• Services login data: timestamping, connection logs
• Data about your location (IP address)

Some Personal Data may be marked as compulsory for subscribing to and/or using the Services. You can refuse to provide this Personal Data, but you may not be able to subscribe to and use the Services provided by Shop Makers.

3.2. Purpose of processing and legal basis

The general purpose of this processing is to manage your subscription to our Services.

That is, this processing allows us to manage:

• Your subscription requests and to check your eligibility
• Your subscription and to provide you with our Services while you are a member, to contact you or respond to your requests
• Your proof of purchases online to give you access to reductions
• Your cancellation requests
• Your complaints via our external customer services

The basis for the above processing is therefore the execution of the contract between us (Article 6(1)(b) of the GDPR).

This processing also allows us to:

• Filter and verify payment cards used via our payment providers
• Combat fraudulent payments
• Manage debts
• Track the history of Services use and improvements

The basis for the above processing is Shop Makers’ legitimate interest in being required to carry out these actions to protect its Services and clients, and to improve its Services (Article 6(1)(f) of the GDPR).

Finally, your Personal Data may be processed in the context of a listening and/or recording device for calls to our external customer services. The basis for this processing is your consent for recording, which you provide at the start of a call to customer services (Article 6(1)(a) of the GDPR).

3.3. Personal Data recipients

Only those mentioned below can access Personal Data:

• Shop Makers staff who need access to carry out their roles
• Our online payment providers and payment solution suppliers
• Our hosting providers
• Our customer relations provider
• Our email provider
• Our collaborative tool provider
• Our project management: software provider
• Our telephone messaging service provider
• Our Community Manager
• Authorities and public bodies, court officers and members of the legal profession to whom we are obliged to provide Personal Data
• Our lawyers and external auditors within their mandates
• Where Personal Data must be shared to execute an agreement, or to protect your rights or those of Shop Makers

Finally, we may transmit your Data as part of a restructure, reorganisation or transfer of any kind and for any reason (business sale, dissolution, liquidation, merger, etc.).

Your Data will never be transferred to third parties, including partner companies, without written consent from you.

3.4. Retention period

We retain your Data for the period required given the purposes for which it has been collected, then for a period set by legislation and contractual provisions applicable to Shop Makers.

Your Personal Data will then be deleted or anonymised.

4. Processing of your Personal Data when you use the Site

4.1. Type of Data processed

When you use our Site, we collect the following Data:

• Date and time of visit
• IP address
• User agent (browser and version)

4.2. Purpose of processing and legal basis

The browsing data collected by Shop Makers is processed to draw up statistics and audience figures for visits to our Site.

The basis for this Personal Data processing is therefore your consent (Article 6(1)(a) of the GDPR).

4.3. Data recipient

Only those mentioned below can access Data:

• Shop Makers staff who need access to carry out their roles
• Third parties who leave cookies on your devices (computer, tablet, mobile phone, etc.) when you give your consent (for more details, see our cookie banner)
• Bodies, court officers and members of the legal profession where Shop Makes is legally obliged to share Data or this is required to execute an agreement, or to protect your rights or those of Shop Makers

4.4. Data retention period

Shop Makers will retain your Data for the following periods:

• For Google Analytics cookies: 12 months

After this, Personal Data will either be deleted or anonymised.

5. Processing of your Personal Data when we have contact between us (outside a subscription)

5.1. Type of Personal Data processed

When you communicate with us by email outside a subscription (for example, to obtain information about our Services), we may collect your Personal Data. Depending on the request, we may process the following Personal Data:

• Identification and contact data: title, first name, surname, postal address, email address, telephone number
• And any other Personal Data you give us in your requests and messages address

You can refuse to provide your Personal Data. However, it may then be difficult for us to contact you or respond specifically to your requests.

5.2. Purpose of processing and legal basis

The purpose of this processing is to manage your requests. The basis is therefore Shop Makers’ legitimate interest in responding to you and providing you with further information (Article 6(1)(f) of the GDPR).

5.3. Personal Data recipients

Only those mentioned below can access Personal Data:

• Shop Makers staff who need access to carry out their roles
• Our project management: software provider
• Our telephone messaging service provider
• Our Community Manager
• Authorities and public bodies, court officers and members of the legal profession to whom we are obliged to provide Personal Data
• Our lawyers and external auditors within their mandates
• Where Personal Data must be shared to execute an agreement, or to protect your rights or those of Shop Makers

Your Data will never be transferred to third parties, including partner companies, without written consent from you.

5.4. Retention period

We will retain your Personal Data for 3 years after we collect it or the most recent contact from you, unless you exercise your rights. After this, your Personal Data will either be deleted or anonymised.

6. Processing of your Personal Data when you exercise your rights

6.1. Type of Personal Data processed

When you exercise your rights under the Regulations, we will process the following Personal Data:

• Identification and contact data: title, first name, surname, postal address, email address, username, proof of identity (if necessary)
• And any other Personal Data you give us as part of your request to exercise your rights

You can refuse to provide your Personal Data. However, it may then be difficult for us to contact you or respond to your requests.

6.2. Purpose of processing and legal basis

The purpose of this processing is to manage and process your requests. The basis is Shop Makers’ legal obligation as per Article 12.3 of the GDPR.

6.3. Personal Data recipients

Only those mentioned below can access Personal Data:

• Shop Makers staff who need access to carry out their roles
• Our collaborative tool provider
• Authorities and public bodies, court officers and members of the legal profession to whom we are obliged to provide Personal Data
• Our lawyers and external auditors within their mandates
• Where Personal Data must be shared to execute an agreement, or to protect your rights or those of Shop Makers

6.4. Retention period

We will retain your Personal Data while your request is ongoing. Then we will archive it for five (5) years afterwards in line with legislation and to protect our rights in the legal sphere.

We will only keep proof of identity submitted to us for the time necessary to check your identity.

Your Personal Data will then be deleted.

7. Processing of your Personal Data for legal procedures

7.1. Type of Personal Data processed

We may occasionally process your Personal Data for legal procedures such as to respond to requests from the authorities. The following Personal Data is processed:

• Identification and contact Data: here we process Personal Data needed for the procedure including title, first name, surname, postal address, email address, username
• And any other Personal Data given to us by you or judicial authorities in the context of these procedures. We may therefore collect your Personal Data indirectly

7.2. Purpose of processing and legal basis

The purpose of this processing is to manage legal procedures. The basis is therefore Shop Makers’ legitimate interest in receiving, responding to and processing these legal procedures and requests in line with the Regulations (Article 6(1)(f) of the GDPR).

7.3. Personal Data recipients

Only those mentioned below can access Personal Data:

• Shop Makers staff who need access to carry out their roles
• Our collaborative tool provider
• Authorities and public bodies, court officers and members of the legal profession to whom we are obliged to provide Personal Data
• Our lawyers and external auditors within their mandates
• Where Personal Data must be shared to execute an agreement, or to protect your rights or those of Shop Makers

7.4. Retention period

We will keep your Personal Data active throughout the legal procedure. Afterwards, your Personal Data will be archived in line with the Regulations and limitation periods. Your Personal Data will then be deleted or anonymised.

8. Transfers

Shop Makers will do its best to store the Personal Data we process within the European Union or in a country with sufficient guarantees of protection as per Community Regulations.

However, owing to our suppliers, we may transfer Personal Data outside the European Union. If the recipient country does not offer a level of personal data protection equivalent to that of the European Union, we will apply the appropriate legal mechanisms to these transfers, including contractual clauses specially designed for this kind of transfer.

9. Your rights

You have the right to:

• Access your Personal Data: you can ask Shop Makers to confirm that your Personal Data is being processed and verify its content
• Rectify your Personal Data: you can check that inaccurate and/or incomplete Personal Data about you is rectified and/or completed
• Erase your Personal Data: you can, in some circumstances, have Personal Data that Shop Makers has collected about you erased
• Restrict processing: you can, in some circumstances, ask Shop Makers to freeze its use of your Personal Data
• Withdraw your consent to the processing of your Personal Data
• Object to the processing of your Personal Data: for processing whose basis is Shop Makers’ legitimate interest, you can, in some circumstances, object to Shop Makers using some of your Personal Data
• Portability for your Personal Data: for processing whose basis is your consent or the contract between us, you can ask to receive your Personal Data in a machine-readable format
• Decide what happens to your Personal Data when you die

You can exercise these rights at any time by writing to: Shop-Makers Réductions Privées, 5 Avenue Ingres, 75016 Paris. If necessary, we may ask you for proof of identity so we can confirm who you are

You always have the right to complain to the French Data Protection Authority CNIL at the address below if you believe that your Personal Data has not been processed in line with current regulations:

CNIL – Service des plaintes
3, place de Fontenoy – TSA 80715 –
75334 PARIS CEDEX 07
Tel: +33 (0)1 53 73 22 22

10. Changes

This Privacy Policy may be amended or rearranged at any time in the event of legal or jurisprudential changes, CNIL decisions or recommendations, or usage developments.