MOST undertakes to protect the personal data of its customers and to ensure the best level of protection.
To deliver its service, MOST collects personal data from visitors to its website www.maisonmost.com
The purpose of this section is to explain to customers how MOST uses the personal data they can provide on the site.
MOST, as Data Controller, undertakes to comply with the provisions of Regulation (EU) No. 2016/679 of 27 April 2016 relating to the protection of personal data (RGPD).
1. WHO COLLECTS PERSONAL DATA?
The company that collects the personal data and implements the data processing is:
MOST, Simplified Joint Stock Company registered with the Trade and Companies Register of Meaux under number 833950660.
2. FOR WHAT NEEDS MOST COLLECTS PERSONAL DATA?
MOST is only authorized to use the personal data of its customers if it has a valid legal basis.
MOST must ensure that it has one or more of the following legal bases:
- the performance of a contract (eg to process and send an order or to open and manage a MOST account), or;
- the performance of a legal obligation (e.g. keeping invoices), or;
- when it is in the legitimate interest of MOST, or;
- When the Customer has given his consent to the collection of data.
The legitimate interest of MOST must not run counter to the rights and freedoms of Customers. Examples of legitimate interests mentioned in the GDPR include fraud prevention, direct marketing and data sharing within a group of companies.
MOST is required to collect and process the personal data of its customers to carry out the following processing:
What operations are carried out on personal data?
What are the justifications?
- Management of the customer account, shopping cart and orders;
| - Execution of the contract between a Client and MOST
- Management of payment transactions;
|- Management of customer satisfaction (Collection of customer opinions on products and on the performance of customer service);||
- Legitimate interest of MOST Paris to improve the quality of service
|- Fight against fraud during the payment of the order and management of outstanding payments after order;||- Execution of the contract between a Client and MOST
- Legitimate interest of MOST
- Legitimate interest of MOST
|- Sending targeted commercial offers by email, SMS on social networks, on other websites or any other medium;|| - Customer Consent
- Legitimate interest for prospecting mailings on paper
- Customer Consent
- Provision of sharing tools on social networks;
|- Implementation of contests and advertising;||
- Legitimate interest of MOST
- Sharing information with business partners;
| - Execution of the contract between a Client and MOST
- Consent of the Client (for operations for prospecting purposes)
3. WHAT ARE THE DATA RIGHTS?
3.1. What rights can be exercised?
Pursuant to Articles 15 to 22 of Regulation 2016/679 of April 27, 2016, any natural person whose data has been collected has the right to exercise the following rights:
- A right of access
- A right of rectification,
- A right to oppose the processing of his data and to erase his data
- A right to oppose profiling
- A right to restriction of processing,
- A right to data portability
When MOST detects a violation of personal data likely to create a high risk for the rights and freedoms of the Customer, the latter will be informed of this violation as soon as possible.
The Client also has the option of withdrawing his consent at any time.
3.2. How to exercise them?
These rights can be exercised with the MOST company which collected the personal data as follows:
By electronic means, to the address: email@example.com
The request must indicate the surname, first name, postal address, email, if possible the customer reference and must be accompanied by proof of identity.
MOST sends a response within 1 month after the exercise of the right. In certain cases, related to the complexity of the request or the number of requests, this period may be extended by 2 months.
These rights may in certain cases provided for by the regulations be subject to exceptions.
In the event of no response or an unsatisfactory response, the data subject has the right to contact the data protection supervisory authority (the CNIL).
4. WHAT HAPPENS TO DATA AFTER DEATH?
The Customer may formulate directives relating to the storage, erasure and communication of his personal data after his death in accordance with article 40-1 of law 78-17 of January 6, 1978. These directives may be general or specific.
The Customer can formulate his advance directives at the address firstname.lastname@example.org
5. TO WHOM IS THE DATA TRANSMITTED?
Your data is transmitted to MOST partners who may process the data on their behalf (these are recipients) or only on behalf of and according to MOST's instructions (these are subcontractors).
The recipients of the data are:
- Payment institutions (banks)
- MOST also uses subcontractors for the following operations:
- secure payment on the site
- the fight against fraud
- shipping your orders and parcels
- Carrying out technical maintenance and development operations for the website, internal applications and the MOST information system.
- Collection of customer reviews
- Sending commercial prospecting emails
6. IS DATA SENT OUTSIDE THE EU?
For certain operations, personal data may be transmitted to companies located in countries outside the European Union. Prior to the transfer outside the European Union, and in accordance with the regulations in force, MOST ensures the security of these data transfers.
Transfers outside the European Union may be carried out in particular within the framework of the following activities:
Data destination country
Supervision of data transfer
Use of data on social networks
Privacy Shield / Standard Contractual Clauses
7. HOW LONG ARE THE DATA RETAINED?
MOST has determined specific rules regarding the retention period of Customers' personal data. In principle, the data is kept for the time necessary to fulfill the purposes for which it was collected.
Unless there is a legal obligation to the contrary, MOST respects the retention periods recommended by the CNIL.
The retained retention periods are as follows:
- Prospect data (person who has never purchased) is kept for 3 years after the last contact from the prospect.
- Customer data is kept for 3 years from the last purchase.
- Cookies for audience measurement, targeted advertising and sharing with social networks are placed on the customer's terminal for a period of 13 months.
8. WHAT ARE THE RULES RELATING TO COMMERCIAL PROSPECTION?
MOST uses your contact details to send you targeted advertisements, in particular by email, post, on social networks or third-party websites.
MOST complies with the rules enacted by Directive 2002/58/EC of July 12, 2002, which provides for the express prior collection of the customer's consent for the sending of commercial prospecting by electronic means (e-mail or SMS).
Thus, when creating your account on the site, you are expressly asked for your consent to receive offers from MOST by email.
MOST will not send you personalized solicitations by email or sms if you have not consented to them.
There is an exception when the Customer, without having given his prior consent, can however be solicited when he is already a customer of MOST and the purpose of the prospecting is to offer similar products or services.
In all cases, the customer has the possibility of opposing the receipt of these requests by carrying out the following actions:
- When creating the account, do not tick the box related to prospecting;
- For email, by clicking on the unsubscribe link provided in each email; - For the sms, by sending a stop SMS to the number indicated in it;
- By contacting customer service.
MOST may contact you by telephone to offer you offers on products or services. If you do not wish to be solicited, you have the possibility of registering on the list of opposition to canvassing accessible on the site www.bloctel.gouv.fr
Information relating to navigation on the site may be recorded in "Cookies" files stored on your terminal, subject to the choices you have made regarding Cookies and which you can modify at any time.
10.1. WHAT IS A COOKIE ?
The cookie is a small file which makes it possible to remember the terminal used by the Internet user.
There are two types of cookies:
- First party cookies, deposited by MOST for the purposes of navigation and operation of the site.
- Third-party cookies deposited by third-party partner companies in order to identify the customer's areas of interest and to send personalized offers or allowing the Customer to share content on social networks. These third party cookies are directly managed by the companies that publish them and which must also comply with data protection regulations.
10.2. WHY ARE COOKIES, TAGS AND TRACKS USED?
The Cookies that MOST uses allow:
- to establish statistics and volumes of frequentation and use of the various elements composing our services. As such, we use audience measurement cookies.
- to adapt the presentation of our Site according to the terminal used;
- to adapt the presentation of our Site according to the affinities of each Customer;
- to memorize information relating to a form that you have completed on our Site (registration or access to your account, subscribed service, content of an order basket, etc.);
- to allow you to access reserved and personal areas of our Site, such as your account, using identifiers;
- to implement security measures, for example when you are asked to log in to your account again after a certain period of time;
- share information with advertisers on other websites to offer you relevant advertisements and in line with your centers of interest. As such, we use advertising cookies.
10.3. HOW TO SET THE DEPOSIT OF COOKIES, TAGS AND TRACKS?
In accordance with Directive 2002/58/EC of July 12, 2002, MOST collects your prior consent to the deposit of advertising cookies, audience measurement and sharing on social networks.
You can choose at any time to express and modify your wishes in terms of cookies, by the means described below.
You can configure your browser software so that cookies are saved in your terminal or, on the contrary, that they are rejected, either systematically or according to their issuer. You can also configure your browser software so that the acceptance or refusal of cookies is offered to you from time to time, before a cookie is likely to be saved in your terminal.
How to exercise your choices, depending on the browser you use?
For the management of cookies and your choices, the configuration of each browser is different. It is described in the help menu of your browser, which will allow you to know how to modify your wishes in terms of cookies.
For Internet ExplorerTM: http://windows.microsoft.com/fr-FR/windows-vista/Block-or-allow-cookies ,
For SafariTM: http://docs.info.apple.com/article.html?path=Safari/3.0/fr/9277.html ,
For ChromeTM: http://support.google.com/chrome/bin/answer.py?hl=fr&hlrm=en&answer=95647 ,
For FirefoxTM: http://support.mozilla.org/fr/kb/Activer%20et%20d%C3%A9sactiver%20les%20cookies ,
For OperaTM: http://help.opera.com/Windows/10.20/fr/cookies.html
10.3.2. Setting cookies with a tool offered by MOST
In order to comply with the regulations, MOST uses a tool allowing the Internet user to configure the deposit of cookies when connecting to the site www.maisonmost.com
To access the list of deposited cookies and configure their deposit
10.3.3. Opposition list to manage the deposit of cookiesYou also have the option of opposing the deposit of cookies by accessing the website http://www.youronlinechoices.com/fr/controler-ses-cookies/ .
10.3.4. Link to third-party publishers
- Facebook: data usage policy
- Pinterest:data use policy
- Instagram: data usage policy
- Twitter: data usage policy
MOST uses advertising cookies, the Internet user of which can consult the data protection policy to configure the cookies:
- Google Ads: settings Google advertising solutions
MOST uses the Google Analytics audience measurement cookie that can be configured at the following address https://tools.google.com/dlpage/gaoptout?hl=fr