1. Purpose
This Personal Data Protection Policy (hereinafter the “Policy”) aims to inform Data Subjects about how data is collected and processed by the Publisher, as well as about their rights and the means available to exercise them.
Data Controller
For any navigation or purchase on the Site, the Data Controller is COTTAGE BISE.
2. Processing
Purposes of Processing
As part of the operation of the Site, the Publisher collects and processes data in accordance with the purposes stated at the time of collection, namely:
- Conducting statistical studies on browsing behavior
- g and managing the personal account
- Managing orders placed through the site
- Managing cookies
- Handling contact made via the designated contact form
Data Processed
The Publisher may collect the following data:
- Identity: last name, first name, email address, postal address, mobile phone number.
- Mandatory data fields are clearly marked as such.
- Data is collected either through input fields or via cookies that have been previously accepted.
In the case of online payments, banking data is not collected or processed by the Publisher.
It is exclusively and securely processed by the secure payment service used by the Publisher. Terms are available on its website:
https://www.cottagebise.com/
The purpose of data collection is to ensure the smooth operation of the Site and the tracking of orders.
Only data necessary for this objective is collected and processed.
3. Data Security
The processed data is securely stored and access is strictly controlled, limited to authorized individuals only.
All access is secured via a specialized module protected by technical measures and strong passwords.
4. Data Recipients
In accordance with regulations, the Publisher has implemented state-of-the-art organizational and technical measures to preserve the security, integrity, and confidentiality of the data and prevent unauthorized access.
The recipients of the data are the Publisher and authorized staff members.
5. Data Transferred to Authorities and/or Public Bodies
In compliance with applicable laws, data may be transmitted to competent authorities upon justified request, including public bodies, legal officials, bailiffs, and debt recovery agencies.
6. Retention Periods
Data related to accounts or orders is retained for a maximum of two years after the last login or order.
By exception, accounting data, particularly for invoicing, is archived for ten (10) years from the invoice date, in accordance with regulations.
7. Rights of Data Subjects
Data Subjects have the right to access, rectify, delete (right to be forgotten), object, restrict processing, and data portability.
These rights can be exercised in accordance with French Law No. 78-17 of January 6, 1978 as amended, and the GDPR:
- By email: contact@cottagebise.com
- By mail: to the Publisher's postal address
- Through the contact form on the Site
Proof of identity may be requested when processing any request.
If a violation of these provisions is suspected, the User has the right to lodge a complaint with the CNIL (https://www.cnil.fr).
8. Data Transfers
In principle, data collected on the site is intended exclusively for the Publisher.
However, in the case of an order, data may be shared with the Publisher’s logistics partners (delivery and shipping services), based on the sales contract.
Before any transfer of data to third parties, the consent of the Data Subject will be obtained.
However, the Publisher reserves the right to transmit data to fulfill legal obligations, especially if compelled by judicial requisition.
9. Security
The Publisher places great importance on the protection of users’ and partners’ personal data but relies on their active cooperation to ensure data security. Users are strongly encouraged to use strong passwords (see guide: https://www.ssi.gouv.fr/guide/mot-de-passe).
10. Cookies
A cookie is a small file stored by a server on a user’s device (computer, phone, etc.) and linked to a web domain. It is automatically sent back during future visits to the same domain.
Cookies serve various purposes: remembering login info, shopping cart contents, display language, tracking navigation for statistical or advertising purposes, etc.
Types of cookies:
- Essential/internal cookies: Store information between visits on the same device (e.g., shopping cart, login info). Do not require user consent.
- Statistical cookies: Track user actions on the site. If anonymous, no consent is needed.
- First-party cookies: Set by the visited site, may be used for personalized data collection and advertising.
- Third-party cookies: Set by external domains (e.g., advertising networks) and may track behavior across sites.
Only non-essential cookies require consent when visiting the site.
Essential cookies are deleted at the end of a session and are not used for data collection.
Retention duration:- Cookies may be retained for a maximum of thirteen (13) months.
- Data derived from cookie usage may be retained for up to twenty-five (25) months.
To ensure proper site functionality, BOONDOOA/COTTAGE BISE may place cookies in the visitor’s browser.
For statistical purposes, BOONDOOA/COTTAGE BISE and the client's name may collect browsing data via cookies.
The visitor can accept or reject cookies by adjusting browser settings. Disabling cookies may limit access to some services.
Visitors can delete cookies at any time through their browser's privacy settings.
Guidance for managing cookies is also available from the CNIL at:
https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser