This privacy policy informs you about the type of personal data collected and received through our website https://ghirotto-luthier.fr (“site” or “website”) and how we use, share, retain, and protect that personal data. We are the data controller for the personal data collected through the website.
How we obtain personal data
We collect and receive personal data through the website. Personal data refers to any information relating to an identified or identifiable individual.
We collect personal data that you voluntarily choose to provide for your use of the website. Additionally, we collect certain personal data using cookies, employing technologies such as browser local storage when you visit the website.
Cookies are small text files placed on your computer’s hard drive or mobile device when you visit certain websites. Cookies contain information that can be accessed by the party that places the cookie, either the website itself or a third party (third-party cookies). You have control over cookies and can refuse their use by selecting the appropriate setting on your browser. Most browsers explain how to stop accepting new cookies, how to be notified when you receive a new cookie, and how to disable or delete existing cookies. Please note, however, that by not accepting or deleting the use of cookies, you may not be able to use the website.
On the site, we use cookies to collect statistical data about the website to analyze how our users navigate the website, including the pages visited, the duration of page visits, and the paths taken by visitors as they move from page to page. These cookies are placed by the domain https://ghirotto-luthier.fr.
For this purpose, we use Google Analytics. Google Analytics is a web analytics service provided by Google, Inc., which uses cookies to help you. The information generated by the cookie about your use of our website (such as your IP address, the URL visited, the date and time the page was viewed) will be transmitted to and stored by Google on servers in the United States or in any other country where Google maintains facilities. Your IP address will be masked by setting the last octet of your IP address to zero before it is stored by Google. Google will use this information to monitor your use of our website and to compile reports on website activity for us. Under our agreement with Google, Google is not allowed to use this information for its own purposes and may only transfer this information to third parties where required by law, or where such third parties process the information on Google’s behalf.
Types of personal data we may obtain
We may collect and receive the following personal data from you:
– Name and contact details (name, address, email, username);
– Account details (such as username and password);
– Information about your use of the site;
– Traffic data
We may collect other types of personal data if required by applicable law or necessary for the purposes listed below. We will inform you accordingly and ensure there is a valid legal basis for doing so.
How we may use personal data
We may share the personal data we collect and receive on a need-to-know basis with the following third parties:
– Online payment service providers when you make a purchase from our site via PayPal or secure card payment via our bank (data transmitted at the time of payment and secured by HTTPS);
– Competent public authorities or other third parties, if required by law or reasonably necessary to protect the rights, property, and safety of ourselves or others.
We may also transfer your personal data if we sell or transfer all or part of our business or assets as needed. In the event of a sale or transfer, we will make reasonable efforts to direct the transferee to use the personal data you have provided in a manner consistent with applicable law and this privacy policy.
We do not sell, rent, or trade your personal data.
Data transfers outside the EEA
We may transfer the personal data we obtain to third parties in countries outside the European Economic Area (EEA). The laws in these countries may not provide an adequate level of data protection. In particular, personal data may be transferred to the United States.
When we transfer your personal data outside the EEA, we protect your personal data as described in this privacy policy and in accordance with applicable law.
How we protect personal data
We maintain appropriate technical and organizational security measures designed to protect your personal data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, due to the inherent nature of the internet, we cannot guarantee that communications between you and us or the personal information stored are absolutely secure. We will notify you of any data breach that may have adverse consequences for your privacy in accordance with applicable law.
How long we retain personal data
We retain personal data as long as necessary to fulfill the purposes for which we collect or receive personal data, unless required by applicable law. Generally, we will retain most personal data for the duration of your use of the website until you delete your account, unless a longer legal retention period applies.
Your rights
You have the following rights concerning your personal data:
– The right to obtain, at reasonable intervals and free of charge, information on whether your personal data is being processed and to receive the processed personal data in an intelligible form;
– The right to have your personal data rectified, blocked, or deleted if your personal data is incorrect, incomplete, inaccurate, irrelevant, outdated, or processed unlawfully;
– The right to object on legitimate grounds to the processing of your personal data.
To exercise these rights, please contact us using the contact details below. We may ask you to provide a copy of your ID or prove your identity. We will respond to your request within the applicable legal timeframes.
Updates to this privacy policy
We may update this privacy policy from time to time. We will notify you of any significant changes to this privacy policy on the website or through other appropriate communication channels. All changes will take effect from the date of publication unless otherwise specified in the notification.
How to contact us
If you have any comments or questions regarding the information contained in this privacy policy, if you would like us to update your personal data, or to exercise your rights, please contact us by email at yves@ghirotto-luthier.fr.
