Skip to content

Cart

Your cart is empty

Privacy policy

BOURRIENNE PARIS X is committed to protecting the personal data processed in the course of its online retail business.

For the sake of full transparency, BOURRIENNE PARIS X has established this Data Protection Policy so that every customer, as a natural person, may at any time be informed of the commitments made and the practices applied to their personal data.

BOURRIENNE PARIS X undertakes to process all data collected in compliance with the applicable data protection laws and regulations (French Law No. 78-17 of 6 January 1978, as amended, and European Regulation 2016/679 of 27 April 2016 on the protection of personal data, hereinafter collectively referred to as the “Regulations”).

1- Glossary

Processing of personal data means any operation or set of operations performed on personal data (collection, structuring, storage, modification, disclosure, etc.).

Personal data means any information that makes it possible to identify a human being (natural person), either directly (for example, their first and last name) or indirectly (for example, their telephone number, contract number or username).

The data subject is the person who can be identified by the data used in the context of personal data processing.

The data controller is the person or entity that determines how the processing of personal data will be carried out, in particular by determining the purposes for which the data will be used and the tools that will be implemented to process it.

The data processor is the person or entity that carries out operations on data on behalf of the data controller. The data processor enters into a contract with the data controller, which entrusts it with certain tasks and ensures that it has appropriate technical and organisational safeguards enabling it to process the personal data entrusted to it in compliance with the Regulations.

The recipient is the person or entity that receives authorised disclosure of personal data.

BOURRIENNE PARIS X is the data controller for the processing of personal data relating to sales made through its website www.bourrienne.com, within the meaning of French Law No. 78-17 of 6 January 1978, as amended, relating to information technology, data files and civil liberties (known as the “French Data Protection Act”), and the General Data Protection Regulation of 27 April 2017 (known as the “GDPR”), collectively referred to as the “Regulations”.

Personal data is processed for the following main purposes:

  • Processing orders placed on the website www.bourrienne.com

  • Providing technological services (websites) and marketing services (newsletter)

  • Managing logistics services (orders, supplies, product assortments and delivery)

Our data processors may process the personal data of BOURRIENNE PARIS X customers where relevant, including for the following purposes:

  • Logistics management (order and delivery management, inventory management)

  • Size recommendation. Our website offers a size recommendation tool provided by Kleep SAS (23 rue Blondel, 75002 Paris), which processes your data on our behalf as a data processor. If you use the tool, you may enter your age, height, weight and certain information about your body shape, or provide two photos of yourself (front and side views). The photos are used solely to estimate your body measurements: they are deleted immediately after this calculation and are never stored or used to identify you. This data is processed on the basis of your consent, hosted within the European Union and retained for a maximum of 12 months. No directly identifying data (name, email address, postal address or payment information) is collected by the tool. You may exercise your rights of access, rectification, erasure, portability and objection by contacting us or Kleep (dpo@kleep.ai). For more information: https://kleep.ai/privacy-policy.

2- Our Key Commitments

As the data controller, BOURRIENNE PARIS X complies with the following principles:

  • Personal data is used only for explicit, legitimate and specific purposes related to the activities of the data controller.

  • Only personal data that is strictly necessary is collected and processed.

  • Data is not retained for longer than necessary for the purposes for which it was collected, taking into account the nature of the processing activities and the requirements set out in the decisions and guidance of the CNIL or in the Regulations.

  • BOURRIENNE PARIS X does not disclose or transfer personal data relating to its customers to third parties, but only to authorised recipients within the strict framework of the purposes defined in advance.

  • BOURRIENNE PARIS X entrusts personal data to data processors selected on the basis of appropriate technical and organisational safeguards, in order to ensure the protection of the data entrusted to them under the instructions of BOURRIENNE PARIS X.

  • Customers are informed clearly and transparently, in advance and on a regular basis, in particular about the purposes for which their data is used, whether their responses in forms are optional or mandatory, their data protection rights and how these rights may effectively be exercised, as well as the recipients of their data.

  • Whenever required by the Regulations, the customer's explicit, informed, active and unambiguous consent is obtained for the processing of their personal data.

  • Appropriate security measures, including logical, technical, organisational and legal measures, have been defined on the basis of a risk assessment of the various personal data processing activities concerned. These measures are implemented by BOURRIENNE PARIS X and its contractually appointed data processors to ensure the protection of personal data.

  • BOURRIENNE PARIS X and its data processors undertake to monitor any potential or exceptional data breach and to take all protective and corrective measures following such a breach, including notifying the CNIL and, where applicable, the data subjects.

3- The Data Protection Officer (DPO)

BOURRIENNE PARIS X appoints a Data Protection Officer to ensure compliance with the Regulations and the rules set out in this Data Protection Policy.

The Data Protection Officer is responsible in particular for:

  • establishing and maintaining a record of the personal data processing activities carried out within the company,

  • ensuring that practices comply with applicable regulations and their developments,

  • raising awareness among all teams of personal data protection requirements and best practices,

  • ensuring the effective exercise of data subjects' rights.

4- Data Collection

BOURRIENNE PARIS X collects the personal data of data subjects in the following ways:

  • In connection with any order placed on the website www.bourrienne.com and the information provided for this purpose,

  • In connection with various communications with BOURRIENNE PARIS X (mailings, letters, messaging services, etc.),

  • In connection with technological services made available to customers (newsletters, online forms, etc.),

  • In connection with logistics services made available to customers.

5- Data Collected

In the course of its activities, BOURRIENNE PARIS X collects data belonging to the following categories of personal data:

  • Identity,

  • Contact details (email address, telephone number, postal address),

  • Connection data (IP address, logs, etc.),

  • Location data (travel, GPS, GSM data, etc.),

  • Banking information (bank card type and banking information required to process the order payment).

6- Use of Data

BOURRIENNE PARIS X uses personal data for the following main purposes:

  • Processing orders placed on the website www.bourrienne.com

  • Providing technological services (websites) and marketing services (newsletter)

  • Managing logistics services (orders, supplies, product assortments and delivery)

Our data processors may process the personal data of BOURRIENNE PARIS X customers where relevant, including for the following purpose:

  • Logistics management (order and delivery management, inventory management)

7- Data Recipients

For each of the processing activities described in the “Use of Data” section above, BOURRIENNE PARIS X determines the recipients of the data according to their responsibilities and authorisations to receive such data, in compliance with the purposes defined.

Depending on the circumstances, these recipients may include:

  • Data processors engaged by BOURRIENNE PARIS X for any technical or logistical operation, as part of the implementation of appropriate technical and organisational measures, particularly with regard to confidentiality and security.

8- Data Retention Period

BOURRIENNE PARIS X has established precise rules regarding the retention period of personal data relating to data subjects, in order to limit retention to the period strictly necessary.

At the end of the retention period thus established, and depending on the circumstances, personal data will, in compliance with the applicable Regulations, be subject to one of the following measures:

  • Deletion,

  • Irreversible anonymisation,

  • Archiving.

9- Data Security

Data security covers the measures taken to protect data against:

  • destruction,

  • loss,

  • alteration,

  • unauthorised disclosure of personal data transmitted, stored or processed,

  • unauthorised access to such data, whether accidental or unlawful.

To ensure the security of personal data, BOURRIENNE PARIS X and its data processors implement appropriate technical and organisational measures, taking into account the state of the art, costs, nature, scope, context and purposes of the processing activities, in order to ensure a level of security appropriate to the risks.

10- Data Protection Rights

Each data subject has the following rights:

  • Right of access / access to their data: the data subject may ask BOURRIENNE PARIS X directly whether it holds information about them and request that a list of such data be provided,

  • Right to rectification / request the rectification of their data: the data subject may request the rectification of inaccurate information concerning them. The right to rectification supplements the right of access.

  • Right to erasure / request the deletion of their data: the data subject may request the deletion of information concerning them, on grounds provided for by the Regulations.

  • Right to restriction / request restriction of the processing of their data: the data subject may obtain restriction of the processing of their data, on grounds provided for by the Regulations.

  • Right to data portability / request the portability of their data: the data subject may request to receive the data they have provided to BOURRIENNE PARIS X, or request that BOURRIENNE PARIS X transmit such data to another data controller, on grounds provided for by the Regulations.

The data subject may also object, on legitimate grounds, to their data being processed, disclosed, transferred, retained or hosted.

For more information about these rights, the CNIL has created a dedicated section explaining data protection rights, which is available here: https://www.cnil.fr/fr/comprendre-vos-droits

To facilitate the process, BOURRIENNE PARIS X asks each data subject, when submitting a request to exercise their rights, to:

  • Specify which right(s) they wish to exercise,

  • Clearly provide their first name, last name and contact details to which the response should be sent,

  • Attach a copy of an identity document.

11- Consent of Data Subjects

All personal data processing activities are carried out by BOURRIENNE PARIS X in accordance with the consent of the data subjects and, in certain cases provided for by the Regulations, the explicit consent of the data subject is required.

Whenever the explicit consent of the data subject is required by the Regulations, it is obtained in advance by BOURRIENNE PARIS X, and the data subject may withdraw their consent at any time by contacting the contacts referred to above.

12- Complaints to the CNIL

Each data subject has the right to lodge a complaint with a data protection supervisory authority.

In France, this authority is the CNIL. Its contact details are as follows:

  • Website: https://www.cnil.fr/

  • Telephone: 01 53 73 22 22

  • Postal address: 3, place Fontenoy TSA 80715, 75334 PARIS Cedex 07

13- Cookies

1- What is a cookie?

A cookie is a file containing letters and numbers, stored on a user's browser or on the hard drive of their computer, smartphone or tablet, if they accept it.

BOURRIENNE PARIS X may use cookies on its websites: files stored temporarily or permanently on a user's computer, tablet or smartphone in order to recognise them during subsequent visits.

2- Why are cookies used?

By continuing to browse the website www.bourrienne.com, the user has consented to the use of all of the following cookies:

  • Navigation cookies

  • Functional cookies

  • Performance and analytics cookies

By learning about how visitors use the website www.bourrienne.com, BOURRIENNE PARIS X may:

  • establish reliable statistics on visitor numbers and the volume of traffic and use of the various elements making up the websites (sections and content visited, browsing paths, etc.), thereby enabling it to improve the usefulness and usability of its services,

  • adapt the presentation of the websites to the display preferences of the user's web or mobile device (display resolution, operating system used, etc.) during their visits,

  • store information relating to forms (registration or access to an account, etc.),

  • implement security measures.

3- How can cookies be blocked?

Users of the websites can block cookies by activating a filter in the browser on their computer, smartphone or tablet.

Users may refuse all cookies or only some of them.

However, if a user chooses to block all cookies, certain parts of the websites may become inaccessible.

  • On a computer

Users can configure their browser so that:

  • cookies are stored on their computer or, on the contrary, systematically rejected or rejected according to their issuer,

OR

  • the acceptance or refusal of cookies can be requested each time, before a cookie can be stored on their device.

For managing cookies and cookie preferences, the configuration of each browser is different. This information is available in the browser's help menu:

  • On a smartphone

For managing cookies and cookie preferences, the configuration of each operating system is different. This information is available in the relevant documentation:

Size Recommendation Tool (Kleep): If you accept personalisation cookies, the tool remembers your recommended size from one visit to the next using the following identifiers, stored in your browser: kleep_uid, kleep_mid, kleep_recommendation_type, kleep_retailer and kleep_is_test (retained for 12 months), and kleep_session_uuid (deleted when you close your browser). If you refuse these cookies, the tool will still work but will not remember you on your next visit.

14- Changes to the General Data Protection Policy

This Data Protection Policy may be amended. In the event of changes to the information set out in this privacy policy, BOURRIENNE PARIS X undertakes to amend the policy and inform the data subjects before implementing any changes that may affect personal data.

BOURRIENNE PARIS X will endeavour to indicate the impact of such changes.

15- Questions and Comments: Contact Us

If you have any questions, comments or concerns regarding this policy, you can contact us by email at contact@bourrienne.com or by post at: BOURRIENNE PARIS X, 58 rue d'Hauteville, 75010 Paris.