Personal data protection charter

1. WHAT IS THE IDENTITY OF THE DATA PROCESSING MANAGER?

The processing is defined by YACCO SAS, with a share capital of 2 037 024 euros, whose registered office is at 16-18 Rue Henri Sainte-Claire Deville, 92 500 Rueil Malmaison (France), registered with the Registre du Commerce et des Sociétés of Nanterre (France) under number 552 009 573 (« YACCO »).

2. THE NATURE OF THE PERSONAL DATA COLLECTED

As part of the use of the https://store.yacco.com/ (the « Website »), its customers and users will be asked to provide certain Personal Data necessary to provide the products and services requested, in particular during purchases made on the Website, when creating a customer account, when registering for communications or when contacting our customer service.

The Personal Data collected, the legal basis of the processing and their duration are detailed in the table below.

YACCO only collects Personal Data that is relevant and necessary for the purposes for which it is processed.

Situation	Personal data collected	Legal basis	Recipients of personal data	Durations
Creating of customer account	Civil status First Name Last Name Email address Phone number Address Password associated with the email address Date of birth VAT number SIRET or SIREN number for professionals	Legitimate interest Performance of the sales contract	Authorised personnel within the YACCO company The ORECA company that operates the online shop Authorised persons within ORECA, which operates the online shop under its responsibility Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website The competent authorities on request, in accordance with the regulations in force	At the latest 5 (five) years after last contact between ORECA company and customer
Order processing	Civil status Invoicing address Shipping addresses Name of the address if different Company name (not required) Credit card details (card type and number, expiry date, cardholder name, visual cryptogram): voluntary recording of this data is done in accordance with the PCI DSS data security standard and is not accessible to ORECA company staff PayPal account Purchase history and associated invoices Customer or user interactions on the Website, necessary for the realization of its various solicitations: products placed in your basket, ordering, customer service request, clothes or shoes sizes	Legitimate interest Performance of the sales contract Legal and regulatory obligation	Authorised personnel within the YACCO company The ORECA company that operates the online shop Authorised persons within ORECA, which operates the online shop under its responsibility Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website The competent authorities on request, in accordance with the regulations in force	At the latest 5 (five) years after your last order 10 (ten) years for sales data necessary to comply with legal and regulatory obligations (limitation period, guarantee or archiving period)
Verification following fraud or suspicion of fraud	Electronic copy of the buyer’s ID IP Address and Authentication data (connection and usage logs, unique identifier) Phone number Email address Address and proof of residence Bank details	Performance of the sales contract Legal and regulatory obligation	Authorised personnel within the YACCO company Authorised persons within ORECA, which operates the online shop under its responsibility The competent authorities on request, in accordance with the regulations in force	13 (thirteen) months from last check and 5 (five) years if considered fraud
Online browsing: Data collected by cookies or other tracking technologies	The various statistics related to the use of the Website Information relating to the navigation of users on the Website in an « anonymized » manner in order to offer the products corresponding to their search on the Website	Legitimate interest Performance of a contract Consent	Authorised personnel within the YACCO company Authorised persons within ORECA, which operates the online shop under its responsibility Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website	13 (thirteen) months following your consent
Newsletters	Email address	Consent Your individual consent will be obtained via your voluntary subscription to the newsletter.	Authorised personnel within the YACCO company Authorised persons within ORECA, which operates the online shop under its responsibility Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website The competent authorities on request, in accordance with the regulations in force	5 (five) years following your consent

3. PURPOSES OF PROCESSING

The Personal Data collected on the customer and the user of the Website are the subject of computer processing enabling YACCO to:

Guarantee the proper execution of the sales contract concluded during purchases made on the Website, ensure the proper management of our commercial relationship and the proper processing of purchases and orders as well as after-sales service ;
If this Personal Data is not transmitted, the order cannot be processed.
Receive marketing communications and information about the Website, its products and its offers (newsletters), with the consent or users of the Website ;
Conduct analytics and statistics to adapt business and marketing activities for the legitimate interest of YACCO ;
Guarantee a good browsing and shopping for users of the Website, in the legitimate interest of YACCO ;
Meet legal and regulatory obligations, including tax, accounting and guarantee obligations.

4. THE RECIPIENTS OF THE DATA

The Data communicated by the customer or by the user of the Website are collected by YACCO and its subsidiaries, in compliance with the legislation applicable to this practice.

These Data may be communicated to:

The subsidiaries of YACCO ;
The company ORECA and its subsidiaries ;
Third-party companies, service providers involved in the provision of services at the request of YACCO and/or ORECA, acting under the responsibility of YACCO, in order to ensure the proper fulfilment of obligations arising from contracts concluded with its customers (payment, logistical services);
Administration and public bodies where there is a legal or regulatory requirement.

Any communication of these Data to a third-party is governed by the conclusion of a contract guaranteeing the protection of the Data communicated and the respect of the rights enjoyed by the users of the Website.

5. TRANSFER OF PERSONAL DATA

YACCO keeps Personal Data collected on servers located in the European Economic Area (EEA).

In the event that some of this Data should be communicated outside the European Economic Area, YACCO will ensure that these transfers are carried out in strict compliance with General Data Protection Regulation no. 2016/679.

6. WHAT ARE YOUR RIGHTS ON YOUR PERSONNAL DATA?

The customer and user of the Website have, subject to the limits provided for by the regulations in force, the following rights with respect to the processing of your Personal Data:

Right of access

The right of access allows to obtain from YACCO the nature of the processing of the Personal Data of the customer or the user of the Website (type of Data, origin of collection, etc.). It also makes possible to request a copy of all this information.

Right of rectification

The right of rectification allows to obtain from YACCO, as soon as possible, the correction of the Personal Data of the customer or the user of the Website.

Right of cancellation (or right to be forgotten)

This right allows the customer or the user of the Website to obtain the early deletion of the Personal Data processed by YACCO. This right may be exercised subject to the compelling nature of the treatment in question.

In all circumstances, the data of the users are automatically deleted at the end of the retention period stipulated by this Data protection policy.

Right to oppose the processing of Personal Data

This right makes it possible to refuse Data processing or no longer appear in it. This right may be exercised subject to the compelling nature of the treatment in question.

Right to withdrawal of consent

This right allows the customer or the user of the Website to withdraw his content at any time, for the purposes for which YACCO has requested his consent authorizing the collection of his Personal Data.

Right to portability of Personal Data

This right allows the customer or the user of the Website to have his Personal Data handed over in a format that can be technically exploited by him or any person of his choice.

For any question relating to this Charter and/or to exercise your rights as described above, you may contact YACCO:

by email: yacco-shop@oreca.fr
by post: YACCO Official Shop chez ORECA STORE – BP706 – 83030 Toulon cedex 9

Each request must be submitted in writing and must be signed and accompanied by a photocopy of an identity document.

YACCO undertake to reply within a maximum of 1 (one) month of receipt of your application. If necessary, this period may be extended by 2 (two) months given the complexity and/or the number of requests addressed to YACCO. In this case, the customer will be informed of this extension and the reasons for the postponement.

In the event that a customer or a user of the Website considers that his rights have not been respected, he may request the intervention of the CNIL: https://www.cnil.fr/fr/agir