Privacy policy

The website charlottebialas.com (https://www.charlottebialas.com/) is owned by BIALAS SARL, who is a data controller of your personal data.

We collect various types of information when you use our website, including:

• Personal information provided by you, such as your name, email address, shipping address, and payment information, when you make a purchase.
• Information automatically collected through cookies and similar technologies, such as your IP address, browser type, device type, and browsing behavior on our website.

We use the information we collect for the following purposes:

• To process and fulfill your orders and provide you with the products and services you request.
• To communicate with you about your orders, account, and promotions.
• To improve our website, products, and services based on your feedback and browsing behavior.
• To personalize your experience on our website and show you relevant content and advertisements.
• To comply with legal obligations and protect our rights and interests.

We use cookies and similar technologies to collect information and enhance your browsing experience on our website. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

• We use essential cookies to enable core website functionality, such as keeping items in your shopping cart.
• We use analytics cookies to analyze website traffic and improve our website's performance.
• We may also use third-party cookies for advertising and social media integration.

By using our website, you consent to the use of cookies in accordance with this Privacy Policy.

We take reasonable measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

You have the right to access, update, and delete your personal information. You may also opt-out of receiving marketing communications from us at any time.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated Privacy Policy on our website.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.

The website is hosted by the company Vercel, located at San Francisco, United States of America.

Art direction and web development: UR×BN.
Fonts: Replica by Lineto & EB Garamond by Google Fonts

PRIVACY POLICY

1. Our commitments

Everyone has the right to protection of his/her Personal Data. We respect users' right to be informed regarding the collection of and other operations involving their Personal Data. In using data that may directly or indirectly identify you personally, we will apply a principle of strict necessity. For this reason, we have designed the Website in such a way that the use of your Personal Data will be kept to a minimum and will not exceed the purposes for which your Personal Data was collected and/or processed; we do not process your Personal Data when we can provide you with services through the use of anonymous or traffic data (such as marketing research made for improving our services, browsing data processed to provide you with customized contents or offers adapted to your preferred language, your location, etc.) or by other means which allow us to identify you, apart from when it is strictly necessary or upon request by competent public authorities or the police (for example, in case of traffic data or your IP address).

This Privacy Policy relates to personal information identifying any user when accessing our Website, using its services and/or filling in forms on our Website with or without purchasing any product (for example: user’s name, address, email address, financial information) (“Personal Data”). This Privacy Policy helps you understand how the Company collects and uses your Personal Data and for which purposes and lists your rights in relation to your Personal Data.

By using this Website, you understand that your personal data is processed in accordance with this Privacy Policy. If you do not want your personal data to be processed, please do not use the Website.

You must communicate to our Customer Service any changes to Personal Data in order to ensure that the information contained in our files is, at all times, up-to-date and accurate. You are responsible, in all cases, for the accuracy of the Personal Data provided, and we reserve the right to suspend or interrupt the provision of the requested services should you provide inaccurate Personal Data, without prejudice to any action allowed by law.

2. Applicable law

Any and all Personal Data sent to the Company through the Website will be collected and/or processed by the Company pursuant to the EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation or GDPR), without prejudice however to any applicable local mandatory laws benefitting to consumers, in accordance with EU Regulation 593/2008 (“ROME I”) of 17 June 2018, or any other conflict of laws rules applicable as the case may be (together, “Data Protection Legislation”).

3. Who collects and processes Your Personal Data, how and for which purposes?

The Company may collect and process your Personal Data for a variety of different purposes.

Your Personal Data may be processed to provide the e-commerce services you subscribed to or reserved for registered users, notably to fulfill orders that you have placed for goods or services through the Website, to contact you in relation to any issues with your order or where we need to provide your Personal Data to our service providers in relation to your orders of products and more generally anything related to our commercial relationship (herein the "Commercial Purposes"). Charlotte Bialas shall be considered as the controller of your Personal Data collected and processed on the Website for Commercial Purposes, as it determines the purposes and means of processing Personal Data for such Commercial Purposes.

Your Personal Data may also be processed for marketing purposes, notably to send to users, also through newsletter, commercial communications, information and updates on our products, offers, samplings, exclusive sales, promotional campaigns and on events and similar initiatives organized by Charlotte Bialas, or to facilitate your navigation on the Website (herein the "Marketing Purposes"). Charlotte Bialas shall be considered as the controller of your Personal Data collected and processed on the Website for Marketing Purposes, as it determines the purposes and means of processing Personal Data for such Marketing Purposes.

For the above-mentioned purposes, Charlotte Bialas has appointed certain entities that will also process Personal Data relating to the Website’s Users (herein the "Processors").

The above-mentioned service providers and Processors have been chosen because of their experience in processing Personal Data and they provide sufficient guarantees regarding compliance with Data Protection Legislation (including the technical security measures governing the processing to be carried out). In processing the Personal Data for Commercial Purposes, the Processors shall act only under the instructions fromCharlotte Bialas. We regularly check that our Processors comply with our instructions and that they continue to provide sufficient guarantees regarding their full compliance with Data Protection Legislation on Personal Data processing.

The Processors of your Personal Data for the above-mentioned purposes are:

• Company’s Customer service, for purposes related to the shipping, delivery and return of products purchased on the Website and customer service to users of the Website;
• Computer services, for purposes related to hosting Company’s servers;
• Payment platforms, for purposes related to the payment method and its execution;
• Logistic services, for purposes related to shipping and delivery and return of the products purchased on the Website.
• Marketing services, for the analysis of use of our Website, sending communications, managing advertising content, etc.

Your Personal Data is mostly processed by electronic means and, in some circumstances, by paper-based means, such as when the processing of your Personal Data is required for preventing fraud on the Website. Your Personal Data shall be stored in a way which allows us to identify you for the period necessary for the purposes which the data was collected for and subsequently processed and, in any case, in accordance with Data Protection Legislation. Your Personal Data shall not be disclosed to third-parties other than us for purposes which are not permitted by law or without your consent.

For the Marketing Purposes, we may process your Personal Data as well as browsing data ("Traffic data") resulting from the use of the Website and of our services by any User, in order to provide Users with customized contents and offers on our services or to deliver any newsletter they subscribed to, subject to their discretionary right to withdraw their subscription to such newsletter or to oppose or object to the receiving of any advertising or marketing content which we think is of interest to a specific User. For Marketing Purposes, Personal Data and Traffic data is mostly processed by electronic means and shall be stored for us in any case, in accordance with Data Protection Legislation and available to our Processors.

Moreover, your Personal Data may be disclosed to the public authorities (e.g. police, judicial) according to applicable laws and upon a formal request by such entities, for example in the event we need to prevent fraud on the Site (anti-fraud services).

Data processors will also have access to your Personal Data as stated in section 4 for the specific purposes stated therein. In all the above circumstances, your consent for data processing is not required as Personal Data Processing would be necessary for the performance of Commercial Purposes.

The reasons for collecting Personal Data will be expressly listed in the information of privacy statement that we will present from time to time on the page asking the User to provide his or her Personal Data, be it for Commercial Purposes or for Marketing Purposes. We may have access to third-parties' Personal Data which was directly disclosed by its Users, for example when a User bought a product to be sent to a friend, when the User paying for the product is different from the recipient of the product, or when a User wishes to recommend to a friend a service of the Website or the sale of a particular product.

In all of the above cases, please make sure you receive the consent of such individuals before disclosing their Personal Data to us and make sure you inform them about this Privacy Policy; you will be the only person liable in connection with the disclosure of information and data regarding such third-parties if they have not provided you with their prior explicit consent for it and for any improper and unlawful use of that information. In any event, we shall fulfill any obligation to inform third-parties required by law and, when necessary, shall request their explicit consent upon registering in their archives the Personal Data of the User indicated.

4. On which legal basis are your personal data processed?

The processing of your Personal Data is justified on different grounds (legal basis) depending on the use that Company makes of the Personal Data.

In some cases, Company asks for your consent in order to process your Personal Data.

However, in certain circumstances, Data Protection Legislation allows us to process your Personal Data without the need to obtain your consent.

You will find below the legal grounds and retention periods that Company applies to its main processing operations:

• Consent: you agree to the processing of your Personal Data by means of an express consent (check box, click ...). You can withdraw this consent at any time;
• The contract: the processing of Personal Data is necessary for the execution of the contract to which you have consented;
• The legitimate interest: Company has a commercial interest to treat your data. This interest is justified, balanced and does not affect your privacy. Except exception, you can at any time oppose to a processing based on the legitimate interest by informing Company.
• The law: the processing of your Personal Data is made compulsory by the applicable regulation.

5. What Happens if You Do Not Disclose Your Personal Data to us? 

Granting your Personal Data to us (in particular, your personal details, your e-mail address, your address, your Credit/Debit Card numbers and bank code and your telephone number) is necessary for processing your order for the purchase of products on the Website, supplying other services provided on the Website upon your request, or when your Personal Data is needed to fulfill obligations required by law or regulations. The refusal to provide us with some of your Personal Data necessary for performing the above purposes may consequently prevent us from processing your order for the purchase of products sold on the Website or fulfilling obligations required by law and other regulations. Therefore, failing to provide Personal Data may constitute, in some cases, a legitimate and justified reason for not processing your order for the purchase of products sold on the Website or not providing the Website’s services.

Disclosure of further Personal Data to us other than that required for fulfilling legal or contractual obligations and to properly browse our services with necessary traffic data is, on the contrary, optional and does not have any effect on the use of the Website and of its services or on the purchase of products on the Website. We will inform you at every step whether disclosing your Personal Data to us is compulsory or optional by marking with an appropriate symbol (*) the information that is compulsory or data needed for the purchase of products on the Website.

6. To whom your Personal Data will be disclosed?

Personal Data will be disclosed to third-party companies that provide, on behalf of the Company, specific services as data Processors or to other recipients of Personal Data collected by us that process your Personal Data only for the Commercial Purposes and, in any case, according to applicable laws and regulations.

Notwithstanding the foregoing, Personal Data will not be disclosed to any other third-parties or disseminated or transferred without informing our Users of such disclosure/dissemination/transfer, and, in any case, in accordance with the applicable laws.

7. Security Measures and length of conservation

We have adopted security measures to protect Personal Data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and against all other reasons for data processing that do not comply with our Privacy Policy.

For the best possible protection of your Personal Data outside the limits of our control and management of the same, it is advisable that your computer be provided with software devices that protect network data transmission/receipt (such as updated antivirus systems) and that your Internet service provider take appropriate measures for the security of network data transmission (such as, for example, firewalls and anti-spam filtering).

We will only hold your Personal Data for so long as is necessary for us to fulfill the purposes set out in this Privacy Notice. Where we no longer need to process your Personal Data for the purposes set out in this Privacy Notice, then we will delete your Personal Data from our system.

8. Transfer of your Personal Data to other countries

The Personal Data we collect from you is currently held within the European Union (‘EU’). However, it is possible that in the future such Personal Data may be transferred, stored and/or processed outside the EU.

By submitting your Personal Data, you agree to this transfer, storing and/or processing. You should be aware that countries outside the EU may not offer the same level of data protection as the EU. However, we will take reasonable steps to ensure that your Personal Data is given equivalent protection in accordance with the Data Protection Legislation, in particular by implementing adequate contractual conditions in our agreements with business partners dealing with transfer of Personal Data to ensure that Personal Data are processed according to our instructions, and in such a way to maintain their integrity and security.

9. Your rights in relation to your Personal Data

We set out below a summary of the rights available to you in connection with your Personal Data.

For your convenience, and without prejudice to certain formal requirements set out in the Data Protection Legislation, you can exercise any of these rights by contacting us at contact@charlottebialas.com

• Right to withdraw your consent:

You may at any time withdraw the consent you give to the Company for processing your Personal Data. Please note, however, that where you do withdraw your consent or otherwise object to our processing of your Personal Data then this may impact on our ability to provide you with goods and services or affect the functionality of our Website.

In addition, if you want to stop receiving future marketing messages, communications and materials at any time, you can do so alternatively by clicking the 'unsubscribe' link which is included in all of our email marketing messages.

• Right to access your Personal Data in our possession:

You are entitled to obtain, at any time, confirmation from us as to whether or not we are processing your Personal Data and, where that is the case, access such Personal Data.

Moreover, you are entitled to receive from us all information listed on Article 15.1 of the GDPR, for example, information on the source of your Personal Data; the purposes and way of processing your Personal Data; the logic involved in any electronic data processing; details of the data controller and of the data processors; the names of the entities and categories of entities to whom your Personal Data may be disclosed or who may access your Personal Data, for example, as a data controller or a party so appointed.

• Right to have inaccurate Personal Data rectified:

You have the right to obtain from us without undue delay the rectification of inaccurate Personal Data that we hold and which concerns you. This includes the right to request that incomplete Personal Data is completed.

• Right to erasure:

You have the right to obtain from us the erasure without undue delay of Personal Data that we hold and which concerns you, in the circumstances as provided by Data Protection Legislation.

• Right to restriction of processing:

You have the right to restrict the way we process your Personal Data in the circumstances as provided by Data Protection Legislation.

• Right to data portability:

You have the right to receive from us the Personal Data concerning you which you have provided to us, in a structured, commonly used and machine readable format and have the right to transmit this data to another controller without hindrance from us. This right shall include the right to require us to transmit the relevant Personal Data to another controller on your behalf, where technically feasible. This right only applies to personal data that: (i) we gain your consent to process; or (ii) we obtain in order to perform our contractual obligations to you, and in each case to the extent we process your Personal Data by automated means.

• Right to lodge a complaint about us:

You are entitled to exercise your right to lodge a complaint with a competent supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes Data Protection Legislation.

10. Opt-in/Opt out 

Each time your consent is required, the Company will inform you in advance and will give you the option to either provide or refuse your consent for the use of your Personal Data, including your e-mail address, for the above purposes, by ticking the appropriate boxes.

We wish to inform you that we may process your Personal Data also without your consent in certain circumstances, such as when such processing is necessary for performing a legal obligation to which we are subject or when such processing is necessary for performing obligations undertaken in contracts with the users.

11. Amendments and updating of this Privacy Policy

We may amend or simply update all or part of this Privacy Policy, including when amendments are made to legal provisions or regulations which govern data protection and protect your rights. The amendments and the updating of the Privacy Policy shall be binding as soon as they are published on the Website in this section.

This Privacy Policy has been updated in March 2022