As part of our compliance with the European General Data Protection Regulation (GDPR), we invite you to read our privacy policy.
This privacy policy may be consulted at any time on the following website: www.khaidenbijoux.com.  This privacy policy is subject to change, so we invite you to regularly consult the dedicated page on our website.

Nature of the personal data collected 

The following personal data are collected by our services, on the basis of your consent, in the context of the execution of your contract, to comply with our legal obligations and/or to respect our legitimate interests, when: you browse our website or our social media pages , you browse our products, you subscribe to our alerts, you send us a request via our contact form, you write a review on our website or our pages created on social media, you browse our services, you create an account, you conclude a contract.

Only data that are adequate, relevant and strictly necessary for the purpose of the processing are collected. The compulsory or optional nature of the data provided is indicated at the time of collection by an asterisk. If you do not provide us with compulsory information, we will not be able to process your request.
We are committed to complying with the applicable laws and regulations regarding the protection of personal data, to processing the data if required for the purposes of the processing, to keeping personal data strictly confidential, within the limits set forth herein and by the GDPR, and to taking the necessary organizational, physical and technical security measures.

Browsing our website

Browsing and connection data are collected by our services or by Google Analytics when you browse our website and our products: cookies, Internet Protocol (IP) address of the connection, URLs of the links through which you accessed the site, identification of terminals, type of operating system used by the terminal, type and version of browser software, access provider. The parameters relating to cookies can be modified at any time.

Creating an account and browsing the online sales platform 

Data relating to your surname, first name, postal address (delivery/invoicing), e-mail address, telephone number, as well as the information necessary, if any, for the delivery of an ordered product, the order history , password, login, and any other data provided by you, are collected and stored by our services as part of the creation of your account.
If you log in and use the online sales site, data relating to your login and password, your order history, as well as connection data are collected by our services or by Google Analytics (cookies, URLs of the links through which you accessed the site, terminal identification, type of operating system used by the terminal, type and version of browser software, access provider, etc.). The parameters relating to cookies can be modified at any time. Browsing our social media pages The cookies activated in our social media pages to which we have subscribed allow us to collect personal data about you. The social media can thus use trackers in order to search and analyse your centres of interest.

We do not control cookies deposited by social media. We invite you to read their policy concerning these data files.
Subscribing to our email alert / sending a contact form

The data relating to your surname, first name and e-mail address, filled in by you, are kept by our services.

The user shall refrain from disclosing any personal data of another person or data which do not refer to him/her.
 

Concluding a contract

Data relating to your surname, first name, postal address (invoice/delivery), e-mail address, telephone number, information necessary, if any, for the delivery of a, ordered product, order history, and information provided by you, are collected and stored by our services.
Where applicable, the Buyer's bank details (card number, expiry date, visual cryptogram) are collected as part of the conclusion of the contract.
To verify the identity of bank card holders, the Seller may also request proof of identity and/or address.

Minors under 15 years of age 

Our website is intended for adults, who are the only ones likely to enter into a contract with the company.

Minors under the age of 15 must, prior to browsing the site and entering personal data, obtain the consent of their legal representative.

Identity of the data controller and its representative

The controller is:

KHAIDEN, a one-person limited liability company (EURL),  registered in the RCS (companies register) of Dax under n° 888 938 487, with a share capital of 15,000 €
Head Office: 54 avenue Simone de Beauvoir 40130 Capbreton (FRANCE).
E-mail address: contact@khaidenbijoux.com
Phone: +33 (0)659273556

The representative of the controller is:

Ms. Christelle BERNADET
Address:  54 avenue Simone de Beauvoir 40130 Capbreton (FRANCE).
E-mail address:  contact@khaidenbijoux.com
Phone: +33 (0)659273556

Legal basis of the processing operation

Data are collected:

- In a contractual framework (in case of online purchase)
- To respond to our legitimate interests (in particular for certain cookies such as functional cookies, and, where applicable, in the event of prospection activities)
- On the basis of your consent for one or more specific purposes, in particular concerning the sending of a contact form , the creation of an account, the sending of certain commercial information, the policy relating to certain cookies and browsing data,
- Finally, certain data are collected in order to comply with our legal obligations (particularly for accounting purposes, management of your rights, etc.).

If data are collected in a contractual framework, the communication of these data is a condition for the conclusion of a contract. You are therefore obliged to communicate these personal data.

In other cases, if you do not provide these data, your request may not be treated favourably as it may require communication of specific information about you.

Some of the data collected will be used for commercial purposes. This processing purpose is only envisaged in the event of the express consent of the data owner, if he or she is a natural person, or under the conditions of Article L 34-5 of the French Post and Electronic Communications Code (legitimate interest).

Purposes of data collection

Browsing our website and the online sales platform
For the purposes of website use and display statistics, this site uses different technologies (which we will refer to generically as "cookies"), which record information relating to the user's connection and browsing on the site. A cookie is a small text file that is transferred from a web server to a computer's browser or hard drive (or any other device) when you visit the site. You have the option of accepting or refusing the installation of these cookies. Certain parts of the site cannot be operational without the acceptance of cookies.

This site uses functional cookies, necessary for its operation. These cookies enable you to benefit from the main functionalities of the site, to access your personal area, if necessary, and to ensure, among other things, the safety of your connection. Consequently, if you refuse the installation of functional cookies or if you delete them, the use of the site and its functions may be hindered or totally prevented.

Our site also uses cookies to optimise performance, basically to enable smooth browsing (memorisation of information, etc.), adapted to the device being used, and, where appropriate, to facilitate your shopping experience. It also uses performance cookies that enable us to monitor the site's performance and to detect any difficulties and potential malicious activities. If you object to the installation of optimization and performance cookies, the related functionalities may be hindered or totally prevented.

The site uses statistic and audience measurement cookies intended for GOOGLE ANALYTICS (number of visits, audience analysis, etc.) in order to enable us to improve our site and measure its traffic . If you object to the installation of performance or audience measurement cookies, we will not be able to ensure the quality of the services offered via our site.

We decline all responsibility for the consequences of a defective or limited use of the website resulting from the refusal of these files.

All data collected will be used to track the volume, type and pattern of traffic on the site, to ensure the security of the site (in particular to prevent or track any malicious attempt), to further develop its design and layout and for other administrative and planning purposes and more generally to improve our services .
We inform you that you can at any time, express or modify your choices regarding cookies directly from the site, by checking or unchecking an option, which will disable the corresponding cookies on our site .
More generally, you have the possibility to configure your browser and disable cookies. To find out how to configure your browser, please go to the following page: https://www.cnil.fr/fr/cookies-les-outils-pour-les-maitriser. For more details on the procedure to follow, please refer to the general conditions of use.

Personal data collected in the context of creating an access account to the online platform are intended to identify the user, to provide the platform's services, to manage access and use by users, to improve services, to maintain a secure environment, to manage relations with the user, to manage the site's operation. They enable us to respond to requests made by the user and to contact him/her on this subject, to send commercial and advertising information when the user, if he/she is a natural person, has consented to this, and to comply with our legal obligations.

You can delete your account at any time, by sending a request to the Processing Manager, by e-mail or post, to the above-mentioned address, enclosing proof of identity.

The personal data collected when the user leaves a review on our website or our social media are intended to manage our relationship with that user. Subscribing to our email alert / sending a contact form

The data collected from users are used for the following purposes:

- User Relationship Management
- To manage access to the services available on the site and to manage their use by users
- To respond to requests made by the user and to contact him/her in this regard
- To inform the user in case of subscription to an email alert
- Sending of commercial and advertising information if the user - him/her being a natural person -, has consented to it.
- To compile statistics on the use of our website

Concluding a contract The data collected from customers are intended :

- To manage the relationship with the client, including in the context of a claim, and debt collection,
- To ensure the proper execution of the contract, the follow-up of the commercial relationship, the payment of orders, the delivery of products, the provision of services to the Customer, and to set up a customer file,
- To secure the execution of the contract and fight against fraud,
- To comply with our legal obligations, particularly in terms of accounting,
- To send commercial and advertising information as long as the customer, if he/she is a natural person, has consented to it, it being specified that direct prospection by e-mail is authorised if the customer's contact details have been collected from him/her during a purchase or service provision, and as long a the direct prospection concerns similar products or services provided by the same natural or legal person. The customer can reject the use of his/her data for these purposes by clicking on the link included in the prospecting e-mail .

Data collection also allows managing your rights.

There is no automated decision making, including profiling .

Recipients or categories of recipients of personal data

The personal data that we collect are intended for the company KHAÏDEN,  its manager and staff.
The personal data we collect may be shared with third party companies and individuals in the following cases:
- The information collected may be communicated to third parties contractually bound to the Seller for the performance of administrative and accounting tasks (in particular to the company's chartered accountant) and of sub-contracted tasks necessary for the processing of the Customer's requests, the conclusion and execution of the contract (in particular for the payment and dispatch of orders), and certain services that we offer, for the aforementioned purposes, and where appropriate for the collection of debts when the authorization of the Customer or user is not required.  Browsing and connection data are collected by GOOGLE ANALYTICS in particular for audience measurements. These service providers have a limited access to these data, pursuant to the execution of their services and they have the obligation to use them in accordance with the provisions of the applicable regulations relating to personal data protection.
- Where appropriate, to the body responsible for managing the list of those opposed to cold calling.
- In the event of requisition by the public authorities, or pursuant to a law or regulation, this information may be communicated upon the express request of the administrative and judicial authorities.
- In the event of a merger, acquisition, disposal of assets or collective proceedings relating to the Seller's company
- No commercial use is made of personal data collected from third parties . Your data are stored in our databases and, where applicable, in those of our service providers.
- Our website is hosted by OVH,  a simplified joint-stock company (SARL) registered in the RCS of Lille Métropole, under n°424 761 419, having its head office at 2 rue Kellermann, 59100 ROUBAIX. Phone: 06 88 08 26 84, gregory.grosso@2gci.fr
- Our webmaster, in charge of the maintenance of the site is: SGCOM, Mr Sylvain GOURCY, Siren number 520 315 748, 13 rue de la Doloire 40510 SEIGNOSSE, contact@sg-com.fr,
- The Carriers with whom we collaborate are: DHL, La Poste and Chronopost
- The payment intermediaries we work with are : PAYPAL and Etransaction with Crédit Agricole

Security and confidentiality

We implement organisational, technical, software and physical measures in the area of digital security in order to protect personal data against modification, destruction and unauthorised access (secure premises, passwords, antivirus, anonymisation, secure https connection thanks to SSL certificate, password encryption, setting up a firewall and monitoring of suspicious activities by the host). However, it should be pointed out that the Internet is not a totally secure environment and that we cannot guarantee the security of the transmission or storage of data on the Internet.

Transfer outside the European Union

If the buyer resides or has the contractual products  delivered outside the European Union, he/she consents to the transfer of his/her personal data outside the European Union for the purposes of the contract and to comply with our legal obligations and legitimate interests.

Only the personal data strictly necessary for the execution of the contract (and in particular for the delivery of the products), and data necessary, if need be, for the establishment, exercise or defence of legal rights will be affected.

The User is informed that the transfer of his/her data is authorised, without any specific legal framework, to a third country (or an international organisation) pursuant to an adequacy decision issued by the European Commission. The list of countries concerned is accessible via the following link: https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde.

In any event, it is recalled that under the provisions of Article 49(1) of the GDPR (b, c and e),
"In the absence of an adequacy decision under Article 45(3) or appropriate safeguards under Article 46, including binding corporate rules, a transfer or set of transfers of personal data to a third country or to an international organisation may only take place under one of the following conditions:
(...) (b) the transfer is necessary for the performance of a contract between the data subject and the controller or in order to take pre-contractual measures at the request of the data subject;
(c) the transfer is necessary for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person (...)
(e) the transfer is necessary for the establishment, exercise or defence of legal claims (...)".

Retention period of personal data

The data collected within the framework of the conclusion of a contract with our services are actively stored for the duration of your contractual commitment and then for the time necessary to manage the contractual relationship. They are then archived for a period of 10 years from the termination of the contractual relationship or from the last customer contact.

The banking data (card number, expiry date, visual cryptogram) are not kept on the site. They will nevertheless be kept in the bank's servers or in PAYPAL's servers.

The sending of advertising information to a customer whose data have been collected in the context of a sale, related to similar products or services provided by the same natural or legal person , may take place up to 3 years after the termination of the contract or the last contact with the customer. His or her contact details will be kept for this purpose throughout this period.

It is specified that in the case of a sale concluded by electronic means, the contracts (and therefore the related personal data) are kept by the Seller for 10 years.

The data collected relating to the subscription to an email alert/newsletter will be kept until you unsubscribe from the alert (unsubscribe link included on each of the emails sent).

The data collected relating to the creation of your access account to the online sales platform will be kept until you request the deletion of your user account.

The data collected relating to an online order of products will be kept by the website for a maximum period of 5 years  from the date on which this information is entered via the website.
The data collected relating to the sending of a contact form is kept by the site for a maximum period of 5 years. The user may at any time request that his/her information be deleted.
Data  resulting from browsing on the site and functional cookies are kept for the duration of the session.
The retention period of data resulting from the acceptance of the cookie policy, optimization cookies, audience measurement, in your computer is 13 months.
Personal data are kept for accounting purposes for the duration of the current financial year and for 10 years after the end of the financial year.
The personal data processed for the management of a dispute are kept for the duration of the proceedings until the prescription of the action in execution of a court decision that has become final.
The information provided within the framework of the exercise of the rights defined below (access, correction, opposition, etc.) is kept for a period of 3 years from the exercise of the said right.
Personal data collected for more than one purpose are retained until the end of the longest retention period.
More generally, data are kept for the duration of the legal prescription period and for as long as necessary to achieve the purpose of the processing operation. The data will, in any event, be kept for as long as is necessary to comply with legal obligations, in particular as regards communication to the various authorities (customs, etc.).

Implementation of user rights

Pursuant to the regulations applicable to personal data, and subject to our legal obligations and legitimate and compelling reasons, and to the limitations provided by the GDPR, in particular in Article 23 of the said regulation, you have the right to ask the data controller :

- Access to your personal data, in the framework of Article 15 of the GDPR,
- The correction (within the scope of article 16 of the GDPR) and the deletion of your personal data (within the scope of article 17 of the GDPR, and outside the derogatory cases provided for by article 17§3 of the GDPR), and the deletion of your access account to the online sales platform,
- Limitation of the processing, within the scope of Article 18 of the GDPR, subject to compliance with legal obligations

You also have the right :

- To object to the processing, in the context of Article 21 of the GDPR
- To object to the processing of your personal data for the purposes of prospecting, including profiling, in the framework of Article 22 of the GDPR.
- To refuse to be subject to an automated individual decision which produces legal effects concerning or affecting you, within the scope of Article 22 of the GDPR, except where such a decision is necessary for entering into, or performance of, a contract, or is legally authorized
- To the portability of your data, pursuant to article 20 of the GDPR
- Withdraw your consent at any time, without this affecting the legality of the data processing, which is based on the consent given prior to withdrawal
- To give instructions for the fate of your personal data in the event of your death.

These rights may be exercised at any time by post to the following address: 54 avenue Simone de Beauvoir 40130 CAPBRETON, FRANCE or electronically to the following email address: contact@khaidenbijoux.com specifying the address to which the reply should be sent.

For security reasons and to avoid any fraudulent request, this request must be accompanied by proof of identity with the signature of the document's holder.

You have the right to lodge a complaint with a supervisory authority:
CNIL 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07

The seller reserves the right to modify the present charter. If necessary, it undertakes to publish the new version on its site.