Legal Notice & Privacy Policy

PREAMBLE

This privacy policy informs you about how Louisa Cabanettes, owner of the brand Du Rébecca, uses and protects the information you provide when using this website, accessible at the following URL: https:// www.durebecca.fr (hereinafter referred to as the "Website").

Please note that this privacy policy is subject to change or updates at any time by Du Rébecca, particularly to comply with legal or technological developments. In such cases, the update date will be clearly indicated at the top of this policy. These changes become binding on users once they have been notified of the updated privacy policy and have accepted it.

ARTICLE 1. PARTIES

This privacy policy is applicable between the publisher of the Website, hereinafter referred to as the "Publisher," and any person accessing the Website, hereinafter referred to as the "User."

ARTICLE 2. DEFINITIONS

"Website Content": Any elements published on the Website, whether protected by intellectual property rights or not, such as texts, images, designs, presentations, videos, diagrams, structures, databases, or software.

"Publisher": Louisa Cabanettes, self-employed entrepreneur in her capacity as the publisher of the Website.

"User": Any person accessing the Website.

"Website": The website accessible at the URL www.durebecca.fr, including its sub-sites, mirror sites, portals, and associated URL variations.

ARTICLE 3. SCOPE OF APPLICATION

This privacy policy applies to all Users. By clicking "I accept" during registration on the Website, you fully accept this policy. Similarly, clicking "I accept" on the cookie information banner displayed on the Website confirms your acceptance while allowing you to customize the cookies that may or may not apply to you. By doing so, you acknowledge that you have read and accepted the policy without restriction.

The User acknowledges the evidentiary value of the Publisher's automated recording systems and agrees not to contest them in case of a dispute, unless they can provide proof to the contrary.

Acceptance of this privacy policy implies that Users have the legal capacity to do so, are at least 16 years old, or otherwise have the authorization of a guardian or curator if they are incapacitated, their legal representative if under 16, or hold a mandate if acting on behalf of a legal entity.

ARTICLE 4. PERSONAL DATA

n accordance with the General Data Protection Regulation (GDPR) adopted by the European Parliament on April 14, 2016, and applicable national legislation, the Publisher provides the following information:

4.1. Data Controller Identity

The data controller responsible for the collection and processing of data on the Website is Du Rébecca, Sole Proprietorship Louisa Cabanettes, headquartered at 26 Route des Molards, 74410 Saint-Jorioz.

4.2. Data Collection by the Publisher

4.2.1. Data Collected

4.2.1.1 Data Collected During Website Navigation

While browsing the Website, you consent to the Publisher collecting information related to: the content you view and click on; demographic data; your device and its software environment; your location; your connection data (time, IP address, etc.).

4.2.1.2. Data Collected via the Contact Form or Contact Email

Using the contact form or email address provided requires the Publisher to collect the following personal data: name, first name, email address*, phone number.

Fields marked with an asterisk (*) are mandatory for using the contact form. Users who do not wish to provide the required information cannot send messages directly via the Website.

4.2.1.3. Data Collected During Registration

Using the registration form requires the Publisher to collect the following personal data: name*, first name*, postal address*, email address*, date of birth, phone number.

Fields marked with an asterisk (*) are mandatory for registration. Users who do not provide the required information cannot register directly on the Website.

4.2.1.4. Data Collected Through the Newsletter Form

When using the newsletter form, the Publisher may collect and process your email address.

4.2.2. Purpose of Personal Data Collection

The data collected during navigation are subject to automated processing for the purpose of:

• Verify user identity;

• Enhance service security;

• Develop, operate, improve, and manage the Website;

• Personalize and enhance user experience;

• Provide information and contact individuals, including via email;

• Target advertising content;

• Prevent unlawful or illegal activity;

• Enforce Website usage terms.

The data collected when using the contact form or the contact email address are subject to automated processing for the purpose of:

• Verify user identity;

• Enhance service security;

• Personalize and enhance user experience;

• Provide information and contact individuals, including via email;

• Target advertising content;

• Prevent unlawful or illegal activity.

The data collected during registration is subject to automated processing for the purpose of:

• Fulfill contractual obligations;

• Verify user identity;

• Enhance service security;

• Develop, operate, improve, and manage the Website;

• Personalize and enhance user experience;

• Provide information and contact individuals, including via email;

• Prevent unlawful or illegal activity;

• Enforce Website usage terms.

The data collected when using the newsletter form is subject to automated processing for the purpose of:

• Send newsletters to the User.

4.2.3. Legal Basis for Data Processing

The data collected during navigation have as legal basis the legitimate interest of the Publisher, namely to carry out an analysis of behavior on the website and obtain improved security and operation of the Site. Some of this data, such as that resulting from the installation of certain cookies, may have as legal basis the consent of the individuals.

The data collected when using the contact form or using the contact email address has the legal basis of the consent of the persons concerned.

The data collected during registration has a contractual relationship as its legal basis.

The data collected when using the newsletter form has the legal basis of the consent of the persons concerned.

4.2.4. Data Recipients

Only the Publisher's management, staff involved in order processing, and personnel managing the Website can access the collected data. This data is never made freely viewable to third parties.

4.2.5. Personal Data Retention Period

Personal data collected during navigation is kept for a reasonable period necessary for the proper administration of the website and for a maximum of 12 months, or until the withdrawal of consent by the persons concerned.

Personal data collected when using the contact form or when sending to the contact email address are kept for a reasonable period necessary for the proper management of the User's request, and for a maximum of 12 months.

The data collected during registration is kept for the duration of the contractual relationship between the Publisher and the User.

The data collected when using the newsletter form is retained until the withdrawal of consent by the persons concerned.

At the end of each of these periods, the Publisher will archive this data and keep it for the time during which its liability may be called into question.

After this retention period, the Publisher undertakes to permanently delete the data of the persons concerned.

4.2.6. Personal Data Security and Confidentiality

Personal data is stored securely in compliance with current technological standards, GDPR regulations, and national legislation.

4.2.7. Personal Data Minimization

The Publisher may also collect and process any data transmitted voluntarily by a User, in particular via the free field of the contact form.

The Publisher guides Users as much as possible when they provide unnecessary or superfluous personal data.

The Publisher undertakes to retain and process only the data strictly necessary for its activities, and will delete any unnecessary data received as soon as possible.

4.3. Respect for rights

You have the following rights regarding your personal data, which you can exercise by writing to us at our postal address or by sending an email to the following address: contact@durebecca.fr.

4.3.1. Right to Information, Access, and Data Communication

You have the right to access the personal data concerning you.

Due to the obligation of security and confidentiality in the processing of personal data by the Publisher, your request will only be processed if you provide proof of your identity. This can be done by:

• For email requests: Providing a scanned copy of your valid ID.
• For written requests: Providing a signed photocopy of your valid ID.

Both documents must include the following statement:
"I hereby certify that this copy of my ID is a true copy of the original. Done at [location], on [date]."

To assist you in your request, you will find here a sample letter template prepared by the CNIL.

4.3.2. Right to Rectification, Deletion and Right to Be forgotten of data

You have the right to request the rectification, updating, blocking or even deletion of your personal data which may prove to be inaccurate, erroneous, incomplete or obsolete.

Additionally, you can establish general or specific instructions regarding the handling of your personal data after your death. In such cases, the heirs of a deceased individual can request acknowledgment of their relative’s passing and/or the necessary updates to their data.

To assist you with this process, you will find here template letter prepared by the CNIL.

4.3.3. Right to Object to Data Processing

You have the right to object to the processing of your personal data.

To exercise this right, you will need to send an email to the following address: contact@durebecca.fr. In your email, please specify the data you wish to have deleted, as well as the reasons justifying your request, except in cases of commercial prospecting.

4.3.4. Right to Data Portability

You have the right to receive the personal data you have provided to us in a transferable, open, and readable format.

4.3.5. Right to Limit Processing

You have the right to request that the processing of your personal data by the Publisher be limited. As such, your data may only be stored and not further used by the Publisher.

4.3.6. Withdrawal of Consent

Your consent is essential for the processing of your data by the Publisher. However, you may withdraw your consent at any time. This withdrawal will result in the deletion of the personal data concerning you.

Please note that services requiring the processing of your data by the Publisher will no longer be accessible.

4.3.7. Response Time

The Publisher is committed to responding to your request for access, correction, opposition, or any additional request for information within a reasonable timeframe, which will not exceed 1 month from the receipt of your request.

4.3.8. Complaint to the Competent Authority

If you believe the Publisher is not complying with its obligations regarding your personal information, you can file a complaint or request with the competent authority. In France, the competent authority is the CNIL, to which you can submit a request here .

4.4. Transfer of Collected Data

4.4.1. Transfer to Partners

The Publisher informs you that we use authorized service providers to facilitate the collection and processing of the data you have provided to us. These providers may be located outside the European Union and have access to the data collected on the website.

The Publisher has ensured that these providers implement adequate safeguards and adhere to strict confidentiality, usage, and data protection conditions, for example, through the U.S. Privacy Shield framework.

The User consents to the transfer of collected data by the Publisher to its partners, who may process this data in connection with third-party services, as follows:

Currently, no partners are known.

4.4.2. Transfer Upon Request or Judicial Decision

The User also consents to the Publisher disclosing the collected data to any person, upon request by a state authority or judicial decision.

4.4.3. Transfer in the Context of a Merger or Acquisition

If the Publisher is involved in a merger, asset sale, financing operation, liquidation, bankruptcy, or in the acquisition of all or part of its business by another company, the User consents to the transfer of collected data by the Publisher to that company, and for that company to process the personal data as outlined in this privacy policy, on behalf of the Publisher.

ARTICLE 5. POLICY ON TRACKERS/COOKIES

When you first log into the Publisher’s Site, you are notified by a banner at the bottom of your screen that information related to your browsing may be recorded in files called “cookies.” Our cookie usage policy allows you to better understand the measures we implement regarding your browsing on our Site. It provides you with information on all the cookies present on our Site, their purposes, and gives you instructions on how to manage them.

5.1. Use of Trackers/Cookies

The Publisher of this Site may place a cookie or other tracker on your device's hard drive (computer, tablet, mobile, etc.) to ensure smooth and optimal navigation on our website.

"Cookies" (or connection witnesses) are small text files with limited size that allow us to recognize your computer, tablet, or mobile device in order to personalize the services we offer.

To provide further clarity on the information identified by cookies, you will find below a table listing the various types of cookies that may be used on the Publisher's Site, their name, purpose, and retention period.

5.2. Purposes of Trackers

With the help of the information contained in the trackers and cookies used, the Publisher can analyze the traffic and usage of the Site and, where applicable, facilitate and improve navigation, carry out prospecting operations, generate commercial statistics, or display targeted advertisements.

5.3. Tracers used

Partner	Purpose of Processing	Partner Conditions
Shopify	Access to secure areas, management of browsing history	https://www.shopify.com/legal/cookies

5.4. Configuring Your Cookie Preferences

Upon your first visit to the Editor's Site, a banner will appear at the bottom of your screen, briefly informing you about the use of cookies and similar technologies. This banner allows you to choose which cookies you accept or reject for placement on your device. By clicking the "I Accept" button, either globally or individually, you are considered to have consented to the placement of cookies. On the other hand, by clicking the "I Refuse" button, you are considered to have rejected the placement of cookies, and this choice may apply to all cookies or only some of them. If no choice is made, you will be deemed to have refused the placement of cookies. Your decision will be saved for 6 months and can be changed at any time.

5.4.1 Cookies Exempted from Consent

In accordance with the recommendations of the National Commission on Informatics and Liberty (CNIL), certain cookies are exempt from prior consent because they are strictly necessary for the functioning of the website or have the sole purpose of enabling or facilitating electronic communication. These include session ID cookies, authentication cookies, load-balancing session cookies, and cookies for customizing your interface. These cookies are fully subject to this policy as they are issued and managed by the Editor.

5.4.2 Cookies rRequiring Prior Consent

This requirement applies to cookies issued by third parties and are classified as "persistent," meaning they remain on your device until they are deleted or expire.

As these cookies are issued by third parties, their use and placement are governed by their own privacy policies. This category includes audience measurement cookies, advertising cookies, and social media sharing cookies (such as those from Facebook, Twitter, YouTube, and Instagram).

Audience measurement cookies create statistics regarding the traffic and usage of various elements of the Site (such as the pages/content you visited). These data help improve the ergonomics of the Editor’s Site.

5.5. Maximum Retention Period for Trackers

Trackers are intended to be stored on the User’s device for a period of up to 12 months. These data are stored securely, using current technical means, in compliance with the General Data Protection Regulation (GDPR) and applicable national legislation.

5.6. Opposition to the Use of Trackers

5.6.1. Option to Oppose the Use of Trackers

You can accept or refuse the placement of cookies at any time.

The User may delete or disable the use of trackers whenever they wish by modifying their browser settings. It is possible to browse the Site without trackers. However, some additional features of the Site may not function properly if the User has disabled the use of trackers, such as form autocompletion or navigation indicators.

5.6.2. Settings

For more information on cookie management tools, you can visit the dedicated page on the CNIL website here .

5.6.2.1. Browser settings

Each internet browser provides its own settings for managing cookies. The User can configure their browser software to reject cookies either systematically or according to their issuer. The User can also set their browser to prompt them to accept or reject cookies each time before a cookie is placed on their device.

To manage cookies and User preferences, the configuration for each browser differs. It is described in the browser’s help menu, which will guide you on how to modify your cookie preferences:

• For Internet Explorer ;

• For Safari ;

• For Chrome ;

• For Firefox ;

• For Opera .

ARTICLE 6. INTELLECTUAL PROPERTY

6.1. Legal Protection of Site Content

The content of the Site may be protected by copyright and database rights. Any unauthorized representation, reproduction, translation, adaptation, or transformation, whether in whole or in part, made without the consent of the Publisher or its rightful owners or representatives, constitutes a violation of Books I and III of the French Intellectual Property Code and may result in legal action for infringement.

6.2. Contractual Protection of Site Content

The User agrees contractually with the Publisher not to use, reproduce, or represent, in any way, the content of the Site, whether or not protected by intellectual property rights, for any purpose other than reading by a robot or browser. This prohibition does not apply to indexing robots whose sole purpose is to scan the Site’s content for indexing purposes.

ARTICLE 7. FINAL PROVISIONS

7.1. Modifications

This Privacy Policy may be modified at any time by the Publisher. The terms applicable to the User are those in effect at the time of their connection to the Site. Any substantial modification of this Privacy Policy will be communicated to the User during their first connection after the changes take effect. This updated Privacy Policy must then be accepted again.

7.2. Severability

The invalidity of any provision of this agreement will not affect the validity of the remaining provisions, which will continue to have full effect and scope. In such a case, the parties must, to the extent possible, replace the invalid provision with a valid provision that corresponds to the spirit and purpose of the original.

7.3. Non-Waiver

The Publisher’s failure to exercise any rights granted to them under these terms cannot be interpreted as a waiver of the right to assert those rights in the future.

7.4. Languages

These terms are provided in French.

7.5. Unfair Clauses

The provisions of these terms apply subject to compliance with the mandatory provisions of the Consumer Code regarding unfair clauses in contracts concluded between a professional and a consumer.

ARTICLE 8. DISPUTES

8.1. Applicable Law

This Privacy Policy is governed by French law and European regulations, particularly the European Regulation on Data Protection.

8.2. Disputes

In the absence of an amicable resolution, any dispute related to the interpretation of these terms will be submitted to the legally competent French courts.