Privacy Policy of your data
Effective date : 01/01/2024
FlexiLivre is committed to protecting your privacy and ensuring the security of customer information. Below is a clear and precise description of the information we collect and how we use it. This privacy policy is as follows:
- The origin of the data
- What we do with this data
- How we store this data
- The possible transfer of this data
- Your rights regarding data protection
- Compliance with data protection regulations
All personal data is collected and processed in accordance with French and European data protection laws. We reserve the right to modify this Privacy Policy at any time, and therefore encourage you to review it regularly. Should we make a significant change to it, we will inform you by e-mail or in your FlexiLivre account.
Data Protection Officer
FlexiLivre has appointed a 'data protection officer' (DPO): this person is responsible for the processing of personal information collected from customers and visitors to our website. For any questions concerning data protection, you can contact us at contact@flexilivre.com
As FlexiLivre is a French company and its head office is based in Paris, the said officer has been declared to the CNIL at the time of declaration number 2119070.
Personal data collected
'Personal data' is understood to mean all data about you that allows us to identify you, such as your name, contact details, your order number, your payment information, and identifiers related to your connection to the FlexiLivre website.
These personal data are collected:
- When you create a FlexiLivre account
- When you use our photo album editing application
- When you place an order to be delivered to a given address
- When you contact us
The information likely to be collected is as follows:
- Name, personal address, email address, phone number, credit/debit card information or other payment information
- History of your FlexiLivre orders
- The photos you have sent us and have uploaded to our application
- The information you fill in about your photo albums (titles, texts)
- Information related to your purchases of products
- Information related to your use of our website and/or mobile application
- Communications exchanged with our customer service: email, chat, phone calls, or social networks
- IP address of your computer at the time of creating your account, and at the time of browsing our website.
- Nature of the device used to connect or browse FlexiLivre (mobile, tablet, computer, etc...)
FlexiLivre does not process and does not save any 'sensitive' personal information within the framework of the GDPR regulation (social security number, offenses and convictions, biometric data, health data, genetic data, political, philosophical, or religious opinions, ethnic origin, trade union memberships, etc.).
What do we do with this personal data, for what purpose and for how long?
The collected data may be used for the following reasons:
- To provide you with the products and services that interest you: we use the information from choices made during your browsing on our site to present you with elements of the photo albums (themes, formats, cover, etc...) that may be suitable for you in the context of creating and ordering your albums.
- To contact you in the case of a defective delivery, a problem encountered before/during/after the printing of your photo album or any other element likely to impact your order and its delivery. These data are not collected for commercial purposes and cannot be deactivated.
- For administrative or legal purposes: we use your data in the context of statistical and commercial analysis, maintenance and development activities, or to resolve a complaint related to client orders. By providing your personal data during the aforementioned events, you explicitly agree that we use your data to perform statistical and commercial analysis in accordance with this privacy policy page.
- To be able to satisfy customs requests: we may need to provide your information to border control services for the delivery of your orders, by declaring the contents of parcels (photo albums, as well as the weight of the package).
- To be able to satisfy a possible request from French authorities, in the context of security, and the prevention and detection of crime: we may disclose your information in the context of a legal request in compliance with French justice.
- To communicate with customer service: we use your data to identify you and thus manage our relationship with you as a customer or prospect, also to improve our services and user experience.
- To offer you personalized services: we use your data to communicate information that may interest you during the creation of your photo book.
- To contact you during marketing campaigns: promotional offers, updates to the site, information on the arrival of new products, or any other information related to the FlexiLivre website that we believe may interest you. You have, for each communication email you will receive, the opportunity to accept or refuse to continue to receive these marketing communications.
Your personal data is stored indefinitely and only for the purposes described above. Sensitive information such as banking data, on the other hand, is not collected by FlexiLivre.
The only exception concerning the indefinite storage of your personal data (unless you request otherwise): photos. Your photos are by default kept for 1 year in the context of creating an album. After one year, an email communication is sent to you, asking whether you wish to keep your album:
- If yes: your photos as well as all data contained therein are kept for another year
- If no: your albums, photos, and data related to the use of them are erased within 15 days
The retention of your personal data also allows us to process any complaints you may bring to our attention over time and duration.
If personal data provided are deemed unnecessary by FlexiLivre, we delete them and do not keep any traces or copies for security measures. We are also attentive to any possibility of reducing the time of use of personal data and anonymizing them so that they can no longer be associated with you, can no longer allow you to be identified in any way, in which case we may use this information without further formalities.
Security of your personal data
We follow specific security procedures regarding the retention and disclosure of your personal data, as well as to protect them against accidental loss, destruction, or alteration. The data that you provide us are protected by SSL (Secure Socket Layer) protocol, a common encryption method for credit card information and data, so that it can be safely transferred over the Internet to our payment provider.
All payment data is transmitted via a secure connection (Secure Socket Layer-SSL). This payment information is only transmitted to our payment intermediary to ensure its proper validity.
We may share your information (except banking information) with trusted third parties for purposes stated in this privacy policy. We require them to implement appropriate and similar security measures to ours in order to protect your personal data, in accordance with French and European data protection laws.
International transfer of your data
We do not transfer personal data internationally, except for email sendings and analyzable metrics during your browsing on our website, carried out from software originating in the United States.
In any case, we require the service providers used in the context of this data transfer to be at least subject to the same requirements as FlexiLivre in the context of the level of European data protection, and in total agreement with all the conditions mentioned in this document.
FlexiLivre also makes use of standardized means within the framework of European Union legislation to legalize data transfers outside of it.
Sharing your personal data
Your personal data may be shared with other FlexiLivre SARL sites. We may also share your personal data with the following third-party services:
- Our printer, to ensure the proper printing of your photo albums: only the information necessary for these purposes is transmitted to it.
- Google: we may use part of the following Google services (Gmail, Analytics, Merchant center, Cloud, Map, Search, Google +, Google Photos, Sheets, Docs, Drive, Adwords, My Business, Hangout) as part of the collection, processing, and analysis of your personal data, solely for the purposes previously stated in these terms. Google complies with the GDPR as of May 25, 2018. You can find all the information related to the data processing done by Google here: http://policies.google.com
- Microsoft: we may use part of the following Microsoft services (Bing ads) as part of the collection, processing, and analysis of your personal data, solely for the purposes previously stated in these terms. Microsoft is in compliance with the GDPR as of May 25, 2018. You can find all the information related to the data processing done by Microsoft here: https://www.microsoft.com/fr-fr/trustcenter/privacy/gdpr
- Payment companies that facilitate the processing of your payments and anti-fraud controls, which may need information related to your payment method or your nominative data, to process payment or ensure the security of the transaction
- Social networks: Instagram, Facebook, Twitter: you may be able to access third-party social media services from our website or mobile application or before visiting our website or application. When you are registered/logged in with your social media account, we collect the personal information that you choose to share with us through these social media services, according to their privacy settings, in order to improve and personalize your use of our website or mobile application. We may also use social media plugins on our website or mobile application. As a result, your information will be shared with the social network and possibly presented on your social media profile for the purpose of sharing with others in your network. We invite you to consult the privacy policy of these third-party social media providers for more information on these practices.
- The data that you choose to make public yourself: by default, all elements of your photo album are private and linked to the account you have created on FlexiLivre; they are then visible only to you. You can choose to share these photos/albums at any time, thus obtaining a link to share, or even to have this link indexed by Google, thus making your album visible or purchasable. You can modify these settings at any time, and make these albums/photos visible to you only again.
- Hosts: the physical servers allowing the storage of your personal data, including photos. All our choices are oriented towards hosts located in France, in accordance with the data protection law in force.
- Collection of opinions: to share your experience, FlexiLivre uses third-party platforms to collect reviews by transmitting your first/last names, order numbers, and dates, allowing you to leave a review in a neutral and independent manner.
- Carriers: in order to deliver your orders, we transmit to the carriers we work with, the data necessary for the proper delivery of your packages (address, name, first name, telephone number), and only those.
FlexiLivre Account
All data collected during your registration on FlexiLivre is processed in accordance with this privacy policy.
When our use of your personal data depends on your consent, you have the option to withdraw this consent regarding the processing of your personal data and delete this data at any time on simple request to contact@flexilivre.com
We keep the personal information contained in your FlexiLivre account as long as you keep your account open. The general retention periods apply to all personal data we collect.
Cookies and tracking
FlexiLivre uses cookies that allow us to improve your experience with our services and to provide certain features that may be useful to you. This may include cookies from media and advertising partners that are placed on your computer when you visit our website or app. Please visit the websites of our partners for more information regarding their Privacy Charter and cookie management policy.
Cookies are small text files transferred to your computer's hard drive via your web browser that enable us to recognize your browser and help us track visitors to our site, thereby allowing us to better understand the journey, products, and services that will be most appropriate for you. A cookie contains contact information, allowing your computer to be identified when you browse our site for the purpose of helping you create and order your album. Most web browsers automatically accept cookies, however, you can change those settings to refuse them. The collected cookies do not alter or collect any other data from your computer than those stated in these terms.
We use tracking software (Google Analytics) to monitor customer traffic patterns and site usage to help us develop the design and layout of the FlexiLivre website. Note that it does not allow us to capture personal information.
Your rights
In accordance with the law, you have the following rights:
- Right of access (Art. 15 of the GDPR): you have the right to ask for confirmation that your personal data is or is not being processed, and if so, to access your information and personal data, for instance to know the categories of personal data concerned or the type of processing they are subject to.
- Right to rectification (Art. 16 of the GDPR): you have the right to request the correction of your inaccurate personal data.
- Right to erasure (Art. 17 of the GDPR): you have the right to request the deletion of your personal data without undue delay under certain circumstances, for example, if your personal data is no longer necessary for the purposes for which they were collected or if you withdraw your consent on which their processing is based, according to Art. 6(1)(a) of the GDPR and when no other legal basis for processing justifies it.
- Right to restriction of processing (Art. 18 of the GDPR): you are entitled to ask us to restrict the processing of your personal data under certain circumstances, e.g., if you believe that the personal data about you that we process is incorrect or illegal.
- Right to data portability (Art. 20 of the GDPR): under certain circumstances, you have the right to receive the personal data that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that information to another controller without hindrance or to ask us to do so.
- Right to object (Art. 21 of the GDPR): in certain circumstances, you have the right to object to the processing of your personal data, particularly if we process them on the basis of legitimate interest (Art. 6(1)(b) of the GDPR), or if we use them for marketing purposes.
You can assert these rights at any time on simple request by email by writing to contact@flexilivre.com and indicating the nature of the personal data to be modified/deleted.